What is the CIA triad in cybersecurity? What are the different types of security incidents? What is the difference between a false positive and a false negative? What is SIEM? Name a few popular SIEM tools. What steps would you take after receiving a phishing alert? What is the difference between IDS and IPS? How would you handle a malware-infected system? What is a security baseline? What is the MITRE ATT&CK framework? Can you explain the TCP handshake?