Against a timeline of real events, this session will disclose how a team of MSS experts recognized the traits of a highly sophisticated, targeted attack against a critical business function and successfully contained the attack, returning the client to normal business operations with minimal disruption—including details of the incident management process and technical measures taken.