[tenuousemphasis]

Well at least you'll know why your data was exfiltrated or your systems compromised, even if you can't stop it...

[softie123]

thats exactly what i went for. also I am keeping all the logs compressed so may be i can build something to build later