Several years ago before I moved to the consulting side of the house, we
were onboarding a contractor do some SIEM work for us. All of the
pre-calls went well, the guy seemed knowledgeable at the time, and we
thought it would be a routine engagement.