Case Study: Large Top10 Banks reduces alert triage time and errors with LogicHub

Large Top10 Banks - Customer Case Study

Large Top10 Banks, one of the largest investment banks in the U.S., was facing severe alert fatigue in its SOC. Its team was dealing with more than 400 hard-coded rules in Spunk, with one bad-URL detection rule alone generating about 225 alerts a week, most of them false positives and each requiring around 30 minutes of analyst time to triage.

LogicHub implemented its Intelligent Security Automation platform to replicate the analysts’ manual investigation steps, cross-checking alerts against related signals and threat intel before automatically marking false positives as reviewed. With LogicHub, alert handling time dropped from 30 minutes to 5 minutes per alert, saving 93 analyst hours per week on that use case alone, reducing mistakes from 98 to 21 per month, and ultimately delivering 308 hours of weekly time savings across five automated use cases.