When Minutes Matter: Online Threat Investigations