Reducing false positives with automated SIEM investigations from Elastic and Tines