How would you determine whether to block, monitor, or investigate a suspicious event first at T-Mobile?
