Hack the Route Start free Open app Detection and response
Defense in depth
Overlapping controls so that when one fails, another still catches or contains the attack.
No single control stops everything, so defences are layered: a firewall at the edge, a sinkhole at the resolver, honeypots inside, host monitoring on each machine, and a response runbook for when something still gets through. Each layer mixes prevention (block it) with detection (notice it), so a miss at one layer is caught at the next. The labs here are the detection-and-response layers behind the perimeter.