## Module 36 Review
Advanced SIEM is Engineering.
*   **Architecture**: How data flows.
*   **RBA**: Reducing noise by scoring.
*   **Optimization**: Writing fast queries.
*   **DaC**: Managing rules via Git.

Next: Digging into RAM with Memory Forensics.