Detailed walkthrough of a phishing investigation scenario using the TryHackMe SOC Simulator. It guides the user through analyzing simulated phishing emails, using Splunk SIEM for log queries, investigating alerts, distinguishing true vs. false positives, and tracking a full phishing attack lifecycle.