DET-05 Watch the files an attacker changes
| | |
DET-13 Wire your identity server into detection
| | |
DET-14 Catch a forged identity (Golden SAML)
| | |
DET: Detection
Write and tune detections against real techniques, and prove they fire on the thing and stay quiet on everything else.