Opus failed security alert triage on raw logs 9/9 times – until enriched

A security alert triage by Opus failed to correctly identify issues in raw logs nearly every time, with a success rate of only 1 in 10. However, the outcome improved when the logs were enriched. The details of the triage are discussed in a white paper and accompanying comments. The white paper explores the cost of correct triage, providing insight into the challenges of security alert management. The discussion is hosted on a news site, where users can engage with the topic. The initial post has garnered little feedback so far, with no comments at the time of reporting.