Monitoring, detection, forensics, and incident response. Where Cliff Stoll cornered Markus Hess by watching a 75 cent accounting error, you learn to see what others miss in logs, packets, memory, and disk.