““You should be able to reconcile past events in a matter of seconds. However, if you do not know what is or has happened, you must take an offensive posture and actively seek out those agents and transactions based on multiple dimensions over time. This is the environment in which you will work and you must build a security model that can actively detect, monitor and pursue that activity.””
