32 GUIDES · SUGGEST A GUIDE
GUIDES · ALL

How-to, end-to-end.

Battle-tested walkthroughs from the team running threatDefendr in production. Each guide is opinionated, dated, and revisited when the underlying surface changes.

ALL DETECT RESPOND DEPLOY OPERATE SECURE SECTORS

Detect

Authoring, testing, and operating detections.

{{ g.tag }}{{ g.time }}·{{ g.level }}

{{ g.title }}

{{ g.summary }}

By {{ g.by }} · {{ g.date }}READ →

Respond

SOAR playbooks, war rooms, and containment patterns.

{{ g.tag }}{{ g.time }}·{{ g.level }}

{{ g.title }}

{{ g.summary }}

By {{ g.by }} · {{ g.date }}READ →

Deploy

BYOC, SaaS, self-hosted — pick the perimeter, follow the recipe.

{{ g.tag }}{{ g.time }}·{{ g.level }}

{{ g.title }}

{{ g.summary }}

By {{ g.by }} · {{ g.date }}READ →

Operate

Day-2 ops, capacity, custom enrichments, and incident retrospectives.

{{ g.tag }}{{ g.time }}·{{ g.level }}

{{ g.title }}

{{ g.summary }}

By {{ g.by }} · {{ g.date }}READ →

Secure

Hardening the integration surface — webhooks, tokens, secrets.

{{ g.tag }}{{ g.time }}·{{ g.level }}

{{ g.title }}

{{ g.summary }}

By {{ g.by }} · {{ g.date }}READ →

Sector playbooks

Patterns the field team sees over and over in a given vertical.

{{ g.tag }}{{ g.time }}·{{ g.level }}

{{ g.title }}

{{ g.summary }}

By {{ g.by }} · {{ g.date }}READ →
← PREV SDKs HOME → Docs home