Watch the following sequence of videos which provide a tutorial for using Splunk to identify and understand a successful hacking attempt on the network:

Part $1.$ Threat Detection

Part $2.$ Threat Validation

Part $3.$ Threat Scoping

What were the main steps that the investigation took to identify a successful hacking attempt? Did you understand why they followed those steps in the scenario? Was there any other data you spotted that as a security professional you would be concerned about? How likely do you think this scenario is in the real world?