Finding the hidden attacker in your network

Fox-IT's Compromise Assessment is a forensic-driven service offering to search an organization's network, logs, and endpoints for traces of past or ongoing advanced intrusions; the document explains the three parallel tracks (network, log, end-point forensics), typical deployment and analysis timeline (about 5–7 weeks), expected deliverables including findings and SANS-mapped recommendations, and contact information for engagement—this is a service overview, not an incident report.