Process mining may not be the right tool for fraud detection. However, it can help us understand what happened after an attack, for example, by visualizing the intruder's path. Lucas Vousten and Vincenzo Salden talk about how process mining can help IT security and dive into a concrete forensics example based on a ransomware attack.