1. In other words… How to automate IR procedures & save 2. Challenges • Many daily alerts from multiple sources. • We are able to detect – now what? • Response…