Enterprise Cyber Defense: Threat Modeling, Zero Trust, and IR Leadership