How to Build a Fool-Proof Threat Detection Program