Me and every MSP out there deals with alert fatigue (especially from legacy tools that flood the queue with noise.)
What I'd love to see is an agent that reviews recurring alerts and:
Flags false positives
Suggests suppression or tuning
Builds a report on which alerts were noise vs. signal
Would save hours every week for ops teams. Has anyone tried something like this?