Managed Detection and Response vs Traditional SOC: What GCC Firms Should Choose