Practical 1: Log Triage and Alert Investigation
Given a sample SIEM dashboard, triage alerts and write basic incident notes