My SOC triage model had 0 false escalations. On real alerts it had 39 out of 100.

· Dev.to