Open Internet by MindsNetHow did you go from decent at KQL/SPL to actually writing good detection rules?