Alert overload is slowing SOCs, pushing defenders toward outcome-based operations

A Rapid7 executive argues that adding more alerts to a security operations center can actually slow response instead of improving it. The core problem is that attackers increasingl