Effective cyber defence in the SOC through smart detection rules