Loading Open Internet
    How did you go from decent at KQL/SPL to actually writing good detection rules?