Case Study: Snowflake cuts manual alert correlation by 91.4% with Tines

Key results

The challenge

Snowflake's incident response team handled a high volume of security alerts that required manual correlation and enrichment before analysts could act. The repetitive work consumed analyst hours each day.

The solution

Snowflake used Tines to automate alert correlation and enrichment, ingest and validate indicators of compromise, and drive its internal case management, including automated Slack channel creation and report population.

The results, in context

Snowflake reported a 91.4% reduction in manual alert correlation. The team calculated that automated correlation and enrichment saved about 10 hours per day.

Products used