Security is Actually a Data Search Problem: How We Win by Treating it Like One

This position paper argues that cybersecurity must shift from reliance on static tools and point-in-time defenses to a continuous, data-driven search paradigm: collect everything (including seemingly unimportant files), preserve historical data to avoid loss of evidence, analyze continuously to adapt to evolving threats, and produce actionable insights. Using the SolarWinds supply-chain compromise as an example, it emphasizes full visibility, long-term retention, and ongoing reanalysis to outpace adaptive attackers.