SIEM-based alert investigations demonstrating event correlation, threat detection, and incident response analysis.

Hands-on implementation of a cloud-based SOC lab using Microsoft Sentinel, focused on log ingestion, validation, and detection workflows.