During our most recent iteration, we happened to detect a port scan within the network of one of our customers (you can see a screenshot of the UI in Figure 1 the orange node represents the event). As part of our internal product QA leading up to any release, we often coordinate with our partners to carry out tests on real data. During the RSA 2018 conference, Lastline launched Breach Defender, a new solution to facilitate the analysis of suspicious anomalies in monitored networks.