SDN’s offer powerful mechanisms including micro segmentation and service chaining. This presentation shows how a system that combines exploit detection and indicators of compromise drive the automation for improved response to APT’s by orchestrating these technologies.