Capstone: Investigate And Close A SIEM Case