Deep Dive ·
Network Guardian: Lateral-Movement Indicators and Context
Lateral-movement investigations need source/destination context, timestamps, identities, and an explanation of the observed technique.
Deep Dive
Implementation notes, threat analysis, and release history. For current supported controls and their prerequisites, use the security guides.
Deep Dive ·
Injection Shield: Normalization and Detection Limits
Different encoded inputs can express similar hostile-looking payloads. Normalization can expose patterns hidden by some encodings.
Deep Dive ·
LLM Firewall: Rule-Based Jailbreak Detection and Limits
Evaluate prompt-injection controls at an observable input/output boundary using hostile instructions and legitimate task examples.
Deep Dive ·
Identity Fabric Monitor: Investigating Synthetic-Identity Signals
Identity anomalies can justify investigation. They are not proof that an individual is fraudulent.