---
title: "Manage the SOC queue"
slug: "manage-alerts-and-hot-stories"
status: "update"
updated: 2025-03-05T16:59:08Z
published: 2025-03-05T16:59:08Z
canonical: "docs.hunters.ai/manage-alerts-and-hot-stories"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hunters.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage Alerts and Hot Stories

Alerts and Hot Stories are security incidents that require your team's attention. For convenience, they appear in the SOC Queue which is the place for triage and threat monitoring.

## Alerts

Alerts are Leads that were marked as highly important and are recommended for triage by the security team.

![image](https://cdn.document360.io/5f63f0e0-3c70-4d00-b623-82493be0bde5/Images/Documentation/Alerty%20lead%20flowchart%281%29.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A35%3A20Z&se=2026-10-27T18%3A35%3A20Z&sr=c&sp=r&sig=nrH7juibj6jNHrBDfDSFCG6y45oye%2FfnuD5HdGuCkuk%3D)

          📘Learn more

          

To learn more about Leads, see:

- [Triage leads](/v1/docs/triage-leads)
- [The anatomy of a lead](/v1/docs/the-anatomy-of-a-lead)

## Hot stories

Hot Stories are security incidents or events that are generating a high volume of alerts or activity within the SIEM system. Hot stories typically involve security events or incidents that are particularly severe or impactful, such as data breaches, malware infections, or network intrusions.

![image](https://cdn.document360.io/5f63f0e0-3c70-4d00-b623-82493be0bde5/Images/Documentation/Story%20hot%20story%20flowchart.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A35%3A20Z&se=2026-10-27T18%3A35%3A20Z&sr=c&sp=r&sig=nrH7juibj6jNHrBDfDSFCG6y45oye%2FfnuD5HdGuCkuk%3D)

          📘Learn more

          

To learn more about Stories, see:

- [About Stories](/v1/docs/about-stories)
- [Reading a story](/v1/docs/how-to-read-a-story)

          📘**In this section**

          

- [Explore Alerts and Hot Stories](/v1/docs/explore-alerts-and-hot-stories)
- [Triage Alerts and Hot Stories](/v1/docs/triage-alerts-and-hot-stories)
- [Define alert generation threshold](/v1/docs/define-alert-generation-threshold)
- [SOC Queue FAQ](/v1/docs/soc-queue-faq)

A lead refers to a potential security incident or threat that has been identified through security monitoring activities or other sources of security intelligence.