Crowe Cyber Watch blog post for "blue team"