incident response 2 SOC153 - Suspicious Powershell Script Executed Jul 24, 2026 SOC257 - VPN Connection Detected from Unauthorized Country Jul 23, 2026