Critical Decisions

Is someone trying to hack into the system?

Are attack from “script kiddies” or state sponsored?

What are they going after and why?

Novelty: Look at activity against valuable assets, not at packet statistics

CIPHER provides the ability to quickly summarize data, find suspicious patterns,  and take corrective action