Harley: early threat detection