@SeanWrightSec If they'd been attacked in a different way to the way they were, Darktrace would've blocked it? Gee, that's helpful. If they'd logged into something DT can monitor, rather than something they can't, they'd have caught them? I'm sold.... /s