SIEM Hunt Workflow

Hello All,

I’ve been looking for SIEM hunt workflow processes on Google with little luck.

Take for example, an infected computer. I’m looking for a workflow process that will guide me along a SIEM investigation.

Time of infection, process used to infect computer, first computer infected, that sort of thing. I’m not interested in a comment on this thread with tips. I’m looking for a well defined workflow article.

If you know of any resources, please let me know.

Thank …

cybersecurity siem