Can SOC Operators Explain their Decisions while Triaging Alarms? A Real-World Study
Conference Conference on Detection of Intrusions and Malware & Vulnerability Assessment
Chania, Greece
Oneliner: Apparently, the operators of our examined SOC mostly rely on gut feelings
TBD