Most security stacks are very good at generating alerts and not nearly as good at telling you which ones matter. The result is familiar to every SOC: a queue th