A bank using the operator’s MDR service faced an encrypted data-exfiltration attempt through DNS tunnelling. AI-SOC detected and blocked the channel, generated an incident report and provided forensic information for investigation – all within 15 minutes of detection.