Networks & Defense
Alert Fatigue
Also: alarm fatigue, alert overload
When too many low-value alerts train people to stop paying attention to them.
In more detail
If most alerts are false positives, responders learn to ignore the stream, and a real attack hides in the noise. Teams reduce it by alerting only on things someone will act on, grouping repeats, tuning rules against real data and retiring rules that never lead to action.
