What we got wrong about purple teaming in our first year | Future of SecOps