Threat Detection

Threat detection skill for proactive discovery of attacker activity through hypothesis-driven hunting, IOC analysis, and behavioral anomaly detection. This is NOT incident response (see incident-response) or red team operations (see red-team) — this is about finding threats that have evaded automated controls.

Table of Contents

• Overview
• Threat Signal Analyzer
• Threat Hunting Methodology
• IOC Analysis
• Anomaly Detection
• MITRE ATT&CK Signal Prioritization
• Deception and Honeypot Integration
• Workflows
• Anti-Patterns
• Cross-References