SOC monitoring and threat detection