Its hard enough to defend the on-prem world. The “Cloud”, presents another terrain for organizations. In order to manage this explosion, organizations need a different way of thinking about threat defense. In this talk, we will present the concept of analytics stories to detect, investigate and respond to threats regardless of their footprint. Analytics stories enable organizations to get beyond linear, atomic, detections and leverage best practices from MITRE and NIST. We will describe the components of the analytics story and share a practical, enterprise ready implementation. At the end of this talk, the attendees will have testable ways to adopt the analytics story way of defending, investigating and responding to threats.