01 / CONTEXT
Challenge & context
Understanding detection and response across different hosts.
02 / APPROACH
Solution approach
A documented lab environment covering agents, log review and response rules.
03 / DOCUMENTED CAPABILITIES
What the available evidence supports
- Multi-platform log ingestion
- Active Response exercises
