• A nurse from the Urgent Care Centre (UCC) flags in the downtime WhatsApp group that the SCM system is running unusually slowly. Patients are waiting and clinical staff are frustrated. • The T&S Infrastructure team dispatches an engineer to UCC to check the desktop. The engineer checks the workstation and finds nothing obviously wrong on the client side. • The engineer then logs into the SCM server via the jump host and notices unusually high CPU and disk utilisation on the server. • At around the same time, MDR contacts the ITSO to flag that they have spotted unusual outbound traffic from the SCM server going to an unknown external IP address. • Cortex XDR has not flagged any alerts on the host. Mehr sehen