Building a Detection-First SIEM: A Strategic Look at Rules, Dashboards, and Threat-Informed Use Cases