Episode 3: Best Practices in Threat-Informed Defense