Cybersecurity Alert Priority MatrixDuring my career in digital forensics and incident response, I have had to, on several occasions, explain to clients/co-works/students how best to classify and prioritise security alerts. This is a common challenge for security operation centre (SOC) staff and those in DFIR teams monitoring alerts. The question I always hear is, “which alert is more important than the other?”. One very rudimentary
