blue-team

Fresh Powder

A detection-as-code investigation repairs five broken Sigma rules and validates each fix against the incident report.