abuseipdb alert triage blue team cyber security firewall IDS incident escalation incident response IOC IPS l1 analyst log analysis malware analysis mitre att&ck network security phishing analysis security operations servicenow siem soc analyst soc l1 splunk threat intelligence virustotal wazuh