Concrete incident response playbook for active zero-day exploitation including detection queries, IoC extraction, and mitigation strategies before patching completes.
Detection Engineering
1 Article
Detection rules, SOAR playbooks, sigma/YARA/Splunk/Snort signatures, hunt frameworks, and threat intelligence operationalization for SOC analysts and detection engineers.