The holy grail of security is knowledge of which attacks are targeting my organization and thwarting the attack before it happens. Can we do that today? Well, no, but substantial progress has been made over the past year to combine threat indicators of an attack targeting a specific industry sector with internal context of risky behaviors in real-time combined with known vulnerabilities.