Inside security operations centres that never close, the hardest problem is often not a sophisticated attacker but exhausted analysts working the.