Abstract: Modern Security Operations Centers (SOCs) struggle with an overwhelming influx of security alerts from diverse sources, leading to alert fatigue and delayed incident response times.