Managed Detection & Response sounds helpful—until you’re breached. Here’s how DFIR changes the game, and when it’s time to call real investigators.