The perform threat triage using the CLI, you must complete the following steps:
Creating the Threat Triage Rule Configuration
Uploading the Threat Triage Configuration to ZooKeeper
Viewing Triaged or Scored Alerts