Less Than 1% of Severe/Critical Security Alerts Are Ever Investigated