Most organizations today realize that it’s not a matter of if, but when, they’ll be the target of a disruptive, costly, and potentially, ruinous, cyberattack. And when it does happen, they want their security teams to contain and remediate the threat quickly. To do that, security operations professionals need to identify the compromised host, know what other devices are connected to that compromised host, and understand the traffic patterns between all of those objects.