Anatomy of an identity compromiseA login-only intrusion, step by step, and where the detection actually livesAug 18, 2026·12 min read·41