A compact field guide for detection engineering: tuning strategy, alert hygiene, and escalation rules.