Redirecting you to Reddit in 5 seconds:
https://old.reddit.com/r/netsec/comments/1cvm2dm/threat_detection_engineering_and_incident