... The Practice of Network Security Monitoring The Practice of Network Security Monitoring Understanding Incident Detection a n d R e s p o n s e b y Rich a r d B e j t li c h San Francisco The. .. expected user of the system as “Sergeant Bag -of- Donuts.” There was an expectation that a “magic box” could be deployed on the network or a piece of software on the end systems and that all of the o...