If an organization decides to give a piece of third-party software like SolarWinds Orion privileged access to everything, Maddison said they need to build a lot of security around it and pay close attention to what systems have access to what data. Companies should raise the level of their network monitoring software so that it's more integrated with the Network Operations Center (NOC), Maddison said. Ultimately, Maddison said the best defense would be identifying campaigns in the wild using artificial intelligence before they strike by examining reconnaissance on the dark web and relating zero-day exploits to specific threat actors. Hackers typically conduct reconnaissance on a targeted organization's systems for months before developing a zero-day exploit, according to Maddison.