Many security experts have moved from a stance of prevention to detection in today's IT environment, where device compromises are almost a regular occurrence. Instead of constructing higher walls in hopes of keeping them out, CISO's are more focused on using techniques to locate the attackers inside their walls.