Not surprisingly, examination right before and immediately after patching. You have to be during the routine of examining the login/logout occasions of buyers. Normally a location check will do. Personally, I just check for everything out of your ordinary. By way of example, a VPN person logging in at 2 PM from unrecognized IP address must be a red