https://odef.wiki/knowledge/index.htmlChapter 4 Knowledge management The importance of knowledge in an organizationHugoen-UShttps://odef.wiki/knowledge/doc-template/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://odef.wiki/knowledge/doc-template/index.htmlTemplate should be used to standardize the detection content and create a knowledge base Detection Summary Status (developing/active/decommissioned) Goal (Why) The goal of the detection TTP (What) Mitre attack link Strategy (How) Query or short explanation about it Automation (When) Schedule and automation details Sources (Where) Data sources used for the detection Severity high/medium/low Priority high/medium/low Research Goal The goal section provides the intended purpose of the alert. It is a simple, plaintext description of the type of behavior you’re attempting to detect and why.