John Shier, Field CTO Threat Intelligence for Sophos, highlights how they deploy tools that allow the early detection of threats as hackers are accelerating their attacks and getting a lot of practice. He emphasizes that it is a constant race and that in order to compete it requires a non-stop monitoring of how fast hackers are moving to active directory, and that users absolutely need a comprehensive protection to stand a chance.