How automated investigation can accelerate threat detection