DOCS-14165: SDS Logs Findings explorer

[drichards-87]

What does this PR do? What is the motivation?

DOCS-14165.

This is a small SDS docs update for the new Logs Findings explorer.

Review focus:

• Adds one new Logs tab to the Investigate Sensitive Data Findings guide with steps for using the updated Logs Findings explorer.
• Keeps the existing non-log telemetry guidance on a renamed APM, RUM, and Events tab.
• Updates a screenshot on the SDS overview page.
• Adds a new screenshot on the Investigate Sensitive Data Findings page.

Merge readiness

• Ready for merge

For Datadog employees:

• ⚠️ Your branch name MUST follow the <name>/<description> convention and include the forward slash (/). If you've already created your PR with an incorrect branch name, please rename your branch and open a fresh PR.
• 🤖 New: Comment with /review to run an automated check that catches common issues before a Documentation team member reviews your PR.

AI assistance

Used Codex to draft the PR description.

Additional notes

[github-actions]

Preview links (active after the build_preview check completes)

Modified Files

• https://docs-staging.datadoghq.com/deforest/DOCS-14165-sds-log-findings-explorer/security/sensitive_data_scanner/
• https://docs-staging.datadoghq.com/deforest/DOCS-14165-sds-log-findings-explorer/security/sensitive_data_scanner/guide/investigate_sensitive_data_findings

[domalessi]

A few comments in line. Nothing blocking!

[domalessi]

Just noting that you reference the UI tab as Telemetry here but Sensitive Data Rule Findings for "APM, RUM, and Events" and "Cloud Storage" tabs on the docs page. Is that intentional, or worth updating for consistency?

[drichards-87]

Good catch. It was intentional. We're starting with a new Logs explorer, but later we'll have separate explorers for APM and RUM, as well. Technically, logs are a type of telemetry, so the PM and I agreed to name the second tab "APM, RUM, and Events" instead of "Telemetry".