I was not referring about the timeline from the breach but the timeline from the transfer of funds, which by their nature are visible by the blockchain and even

I was not referring about the timeline from the breach but the timeline from the transfer of funds, which by their nature are visible by the blockchain and even with everything else failing wouldn't this be on dashboards and part of regular monitoring anywhere else?