Introduction
Revision History
| Date | Author | Summary |
|---|---|---|
| 27-DEC-2022 | TSgt. Bernadotte | Initial draft |
| 12-JAN-2022 | TSgt. Bernadotte | Added procedures to add related alerts to an existing case |
| 16-FEB-2023 | TSgt. Bernadotte | Incorporated rule investigation guide and alert prevalence |
Purpose
This SOP should be employed by analysts when triaging Elastic Detection Alerts within Elastic Security.