Full security operations workflow covering the complete SOC operating model — from alert triage through threat intelligence, vulnerability management, incident detection, incident response, post-incident review, metrics, and compliance reporting. Designed for SOC analysts, security engineers, and security managers running operational security programmes.