Advanced Recommendations for CI/CD Security
High-maturity practices for the protection of pipelines, with a focus on governance, simulated attack and Zero Trust
High-maturity practices for the protection of pipelines, with a focus on governance, simulated attack and Zero Trust
Strategies for correlating logs across sources and detecting suspicious behaviour.
Rules, thresholds and best practices for effective alerts based on sensitive events.
Use of MITRE ATT&CK as the reference vocabulary for detection engineering — mapping of detections to adversarial techniques and tactics and measurement of coverage. ATT&CK is a shared vocabulary and a threat-informed reference, not a complete authority nor a checklist for total coverage.
Principles and practices to ensure visibility, detection and effective response in production environments
Applied examples of logging, alerts and correlation in real contexts