Attack surface monitoring protects your digital assets from evolving threats, but knowing where to start makes all the difference