Security operations on Cortex: XSIAM/XDR investigation, detection engineering, automation playbooks, and incident response.