Two-thirds of cyber threats still require manual resolution

ExtraHop report: SOC analysts spend 68% of their day on reactive alert triage, and 68% of threat detections still require manual intervention. 49% of organizations learn of ransomware only at the data exfiltration stage, 15% only after a ransom demand.

• 68% of analysts' workday goes to reactive alert triage
• 68% of threat detections still require manual intervention
• 49% learn of ransomware at data exfiltration or later
• 55% named AI agents and generative AI apps as top risk