The High Cost of Slow Triage: How to Make Tier 1 the Fastest Layer in Your SOC