The process of setting up rules and hooks for alerting on IDS, IPS and SIEM.

Alert Tuning is the process of reducing noise in alerts.