It takes experience to identify trouble during routine security monitoring events.