Triage Squid Events

Security event triage rules determine which events require further follow up and which events can be archived without further investigation. HCP processes many events every day so effective triage helps analysts focus on the most important events.