The SOC Doesn't Need to Start Over with Every Alert — PLINKFEED