Phishing investigation, brute-force analysis, malware alert triage, and suspicious login review.