This post is for SOC / IR analysts. In Security Operations Center (SOC), we use a SIEM solution (i.e QRadar, Alienvault, Splunk, ELK) that…