Why Managed Detection Zeroes In On the Endpoint