Master alert triage, threat enrichment & UEBA with real case studies and a hands-on Claude + Splunk lab