@Viss To be really clear, I am talking about computers not physical defense.
I was thinking more about something that does better than EDR at getting good data going, and that isn't where the TAs will look to kill. Something that kicks off packet capture and like Velociraptor under certain conditions.