Threat Intelligence, incident documentation, detection engineering, Security Operations, SIEM platforms, investigation workflows, writing detection rules, SOC incident response, purple team exercises, alert triage