Replaced simulated attacks with new alert and incident investigation from device onboarding

[KenMAG]

Checklist

Mark completed with "x" between brackets, "[x]", or checking the box once the PR is created:

• [ ] Has related GitHub Issue 💥 Create Issue 📝
• [x] Tested it
• [x] Read the PR collaboration guide 👓 Collaboration Guide 📝

Changes proposed in this pull request:

• Added new alert investigation