In today's dynamic threat landscape, organizations need robust incident response capabilities to reduce the impact of cyberattacks. A Security Information and Event Management (SIEM) system provides a centralized platform for collecting security logs from diverse sources, enabling prompt threat detection and analysis. By enhancing incident response