Tools
Sigma, YARA, and Hunt helpers
Draft starting points for detection logic, then tune in your environment.
Topic
Detection and response
Use this topic for SOC requests, hunts, detection drafts, response actions, escalation, and action tracking.
Playbook
SOC Handoff Examples
Send specific telemetry, hunt, IOC, and monitoring requests with caveats.
Playbook
Action Tracker
Keep owners, state, notes, and review dates attached to response work.
Guide
Detection Readiness
Understand whether telemetry and ownership can support a detection request.
Practice
Signal Sorter Rush
Practice sorting clues into exploitation, exposure, remediation, trust, and business context.