[Writeup] LetsDefend - SOC282 - Phishing Alert - Deceptive Mail Detected - EventID 257 February 12 2026 LetsDefend Malware Phishing SIEM SOC True_Positive VirusTotal Writeup