How do you investigate the root cause when alerts fire or anomalies are detected in network traffic at Empower?