What is State-in-Time and How Is It Used in a Change Review Audit?

Ransomware, hacks – all around.   One of the best practices encouraged is enforce the Principle of Least Privilege (PoLP) – NIST PR.AC-6.   But how?  Identity Audits and