Dashboard Learn Daily Drop Build Machines Glossary

Messages My Notes Resources Support us Settings

0day streak

0pts

Copilotfree, in-browser

Ask me anything about your lessons or your code.

“What is a port?” · “Why is my code erroring?”

triage

Blue Team and Defense

The first pass over an alert: is it real, how bad is it, and does someone need to act now. Triage exists because a team gets far more alerts than it can investigate deeply, so someone has to sort fast and be right most of the time.

Related terms

Appears in(22)

Comparisons, if, and LoopsPowerShell
CVEs and CVSSVulnerabilities and Exploitation
Enumerating Active DirectoryActive Directory
A Repeatable Windows Privesc MethodWindows Privilege Escalation
Hunting for CredentialsWindows Privilege Escalation
Network ForensicsDigital Forensics
Detection and TriageIncident Response
What a SOC Actually DoesSOC Analyst Fundamentals
Alerts and TriageSOC Analyst Fundamentals
Working a ShiftSOC Analyst Fundamentals
Escalation and HandoffSOC Analyst Fundamentals
Correlation and AlertingSIEM and Log Analysis
Tuning Out the NoiseSIEM and Log Analysis
The Hunting MindsetThreat Hunting
Strings and UnpackingMalware Analysis
IDS and IPSNetwork Defense
S3 SecurityAWS Security
Broken Object Level AuthorizationAPI Security
Putting CTI to WorkCyber Threat Intelligence
The Map of Security RolesBreaking Into Security
Investigating a PhishEmail Security
Monitoring Network ServicesDNS and Network Services Security