Rather than focusing on the events that result in alerts, Fred proposes we look at the system and center it on the operators instead.| Honeycomb
This post described two types of alerts - reactive and proactive - and how a CoPE should approach each type.| Honeycomb