Hey everyone!
I’ve been tracking this trend I call the Cyber-Crime Curve. Basically, it feels like every year we aren’t just seeing more threats, but a total shift in how they play out. We’re moving from just preventing attacks to suddenly having our networks turn into digital crime scenes where we need actual forensics.
My worry is that by the time we realize we need to preserve evidence, it’s usually too late. If we rely on a human admin to manually go in and lock things down, the data is probably already gone or corrupted.
So, I’m trying to figure out how to build what I call an Observatory System using Hexnode. Ideally, I want something that automatically triggers a legal hold and freezes the data the second a threat pops up, without me having to wake up at 2 AM to push a button. Has anyone successfully set up an automated workflow for this?