SoC Analysts Read Firewall Logs: What You Are Expected to Know