They probably don't want to give away too much (like security details of their network), but I think it'd be more compelling with some examples of how to use this for Intrusion Detection.
It's a topic I don't know much about, and I think it'd reinforce the claim this isn't for user monitoring.
It's a topic I don't know much about, and I think it'd reinforce the claim this isn't for user monitoring.