Palantir can help organizations detect if they have been infiltrated by analyzing patterns of data exfiltration, and in cases of attribution uncertainty, can help narrow down the likely location or organization of attackers even when their identity remains unclear.