A practical starter toolkit for SOC triage workflows: checklists, quick commands, and evidence templates.