Text this: Practical Threat Detection Engineering