Threat Detection, Investigation, and Response in the Cloud