Microsoft was called in to conduct an analysis of Active Directory forest management for a bank after a security breach. The company developed a security operations center and incident handling playbook to improve overall security.