Every alert is a mystery, every incident response is a scramble, and every decision is based on incomplete, correlational guesswork.