SOC alert triage, incident playbook automation, escalation workflows, shift reporting, and SOC KPI tracking