“You should be able to reconcile past events in a matter of seconds. However, if you do not know what is or has happened, you must take an offensive posture and actively seek out those agents and transactions based on multiple dimensions over time. This is the environment in which you will work and you must build a security model that can actively detect, monitor and pursue that activity.” DataData ScienceData MiningFbi InvestigationInsider ThreatData SecurityData Analysis QuotesCyber IntelligenceKent Stern Book:Obtaining Actionable Intelligence for CINDER Threat Detection using DMX Mining Models Source: Obtaining Actionable Intelligence for CINDER Threat Detection using DMX Mining Models