If a critical application’s response time is slow, IT operations teams have to determine whether it is a network issue, a server issue, or a cyber attack. That decision gets harder when the suspicious activity crosses identities, cloud infrastructure, and applications. And the business needs a coordinated response while the troubleshooting/investigation is still unfolding.