[Day 13] Intrusion detection To the Pots, Through the Walls

Which security model is being used to analyse the breach and defence strategies? Which defence capability is used to actively search for signs of malicious activity? What are our main two infrastructure focuses? (Answer format: answer1 and answer2) Which firewall command is used to block traffic? There is a flag in one of the stories.