Hunt and triage alerts in Cortex XSIAM: security analytics, automation playbooks, and incident investigation for SOC analysts.