In today's dynamic threat landscape, organizations must robust incident response capabilities to mitigate the impact of cyberattacks. A Security Information and Event Management (SIEM) system offers a centralized platform for collecting security logs from diverse sources, enabling prompt threat detection and investigation. By enhancing incident res