Blocking Zero-Day Attacks with Human Threat Hunters