How to investigate a SIEM Alert

iam desperate to find the answer of the first question in the “How to investigate a SIEM Alert” → Case Creation and Playbook Initiation.
So if anyone know the answer please kind to share with me.