After a VPN-related breach at a global medical device manufacturer, Unit 42 rapidly executed a five-phase response—Assess, Investigate, Secure, Recover, and Transform. Within just two days, they mitigated command and control activity, identified exposed credentials, and tightened network policies across 500 firewalls using AIOps. Cortex Xpanse was leveraged to pinpoint attack vectors, while domain controllers were restored and VPN vulnerabilities addressed. The effort not only neutralized the threat but also modernized perimeter defenses and security posture for long-term resilience….