Simplifying Threat Monitoring Workflows