A guide for security teams to understand and detect Service Host Abuse