Security Operations Procedures
Browse Security Operations Procedures guidance, related topics and practical resources to support cybersecurity planning, implementation and review.
Security Log Source Onboarding Procedure
Security Logging Health Check Procedure
Alert Triage Procedure
Alert Escalation Procedure
Detection Rule Development Procedure
Detection Rule Testing Procedure
Threat Hunting Procedure
Indicator of Compromise Handling Procedure
Threat Intelligence Intake Procedure
Threat Intelligence Validation Procedure
Malicious Domain Blocking Procedure
Malicious IP Blocking Procedure
Malicious File Handling Procedure
Security Case Closure Procedure