What monitoring tools and strategies would you deploy to detect anomalous behavior in an air-gapped or highly isolated network?
