Which of the following techniques can help a SOC team to reduce the number of alerts related to the internal security activities that the analysts have to triage?

Enriching SIEM-ingested data makes alerts more informative and provides context, but it does not directly reduce the overall number of alerts received by analysts.

Scheduling a task to disable alerting during vulnerability scans only addresses a specific type of internal activity and might miss other legitimate internal security events that could generate similar 'noise' or even hide malicious activity during those windows.

Filtering all alarms with low severity might suppress legitimate low-severity alerts that could be precursors to larger incidents, potentially leading to missed threats rather than just reducing irrelevant noise.

A Security Orchestration, Automation, and Response (SOAR) platform can be configured with rules to automatically analyze incoming alerts. By designing a SOAR rule to identify and drop irrelevant or duplicated notifications, the system reduces the 'noise' that analysts would otherwise have to manually triage, significantly improving efficiency and reducing alert fatigue.