SOC teams always feel like they are having to play catch-up on detections, because without the ability to add criticality and context to devices, all devices are considered equal- causing wasted time searching for additional details to understand the alert.
