This appendix describes several different security investigations that are based on real events, and how Omnipeek was used in each of the investigations. In all of the investigations, the names and IP addresses have been changed to protect the privacy of the organizations involved. Several best practices used by many Enterprise customers are described at the end of the appendix.