Lessons learned from Microsoft’s SOC and Detection and Response team