‘We’re always going to sit in the middle and basically have to deal with rising alert volumes, giant telemetry repositories, faster IOCs [indicators of compromise] conversion, more containment,’ says ...