I have a little guy that notifies if someone is operating Responder on the business network and that is my justification as well. As a defender, you only get t

I have a little guy that notifies if someone is operating Responder on the business network and that is my justification as well. As a defender, you only get to fail once for it to be costly. As an attacker, you can often fail hundreds or thousands of times depending on what they have for observability. Adding offensive elements helps level the playing field.