When the MEDIUM alert deserves your first investigation Cybersecurity Insiders