The bottleneck in a mature SOC is rarely analyst triage; rather, it is the detection-engineering team's ability to keep the ...