Analysts in Security Operation Centers (SOC) are experiencing large numbers of alerts that they must analyze. Out of all the alarms an analyst receives, between 50 and 90 % of them are false positives. Because of these ...