Threat Detection

Blue-team / SOC analysis: hunt malicious activity in noisy telemetry and write the detection that catches it — proven to fire on the attack and stay quiet on benign traffic.