Chapter 1.2 Threat Intelligence & Attack Taxonomy
Master threat intelligence lifecycle, MITRE ATT&CK, Kill Chain, Diamond Model, IoC/IoA classification, YARA/Sigma rules, and TI operationalization.
2 docs tagged with "detection-engineering"
View all tagsChapter 4.2 - SIEM, SOAR & Detection Engineering
Build detection pipelines with Sigma rules, YARA, Elastic EQL, and Splunk SPL; automate response with SOAR; validate coverage with ATT&CK and Atomic Red Team.