01
Scenario review
Identity compromise, MFA abuse, and BEC/session theft focus areas
Assessment workspace preview
Inspect the assessment workspace before the conversation.
Open the assessment workspace preview to see which use cases are covered, blocked, noisy, or missing proof, then follow the evidence path behind the highest-priority gaps.
Routes
Signal
Gaps
Evidence
Review
Evidence Ledger
Identity compromise evidence packet
Priority
High
Priority
High
Identity risk
Telemetry gap
MFA logs
Validation blocked
Evidence
Replay notes
Reviewer linked
SOC route
Identity queue
Owner assigned
Monthly review
Readout
Executive artifact
Priority
High
Gap
MFA logs
Evidence
Replay notes
Review
SOC route
Assessment evidence for identity alert route, source blockers, reviewer notes, and executive readout.
Review ledger rows
VC-ID-014Blocked
Identity compromise
Source: Identity logs
VC-VAL-021Ready
Replay notes
Source: Rule review
VC-REL-008Human review
Route review
Source: SOC queue
VC-MON-005Draft
Monthly review
Source: Evidence board
| Evidence ID | Record | State | Source |
|---|---|---|---|
| VC-ID-014 | Identity compromise | Blocked | Identity logs |
| VC-VAL-021 | Replay notes | Ready | Rule review |
| VC-REL-008 | Route review | Human review | SOC queue |
| VC-MON-005 | Monthly review | Draft | Evidence board |
Telemetry gap: MFA audit fields missing; validation blocked.
Validation evidence: Replay notes and reviewer history attached.
SOC route: Identity queue and owner ready for review.
02
Alert utility
Expected SOC route, noise notes, and false-positive pressure
03
Telemetry blockers
Missing log sources and field gaps tied to detection risk
04
Evidence
Validation records, owner trail, and reviewer notes
05
Release readiness
Human-approved change context and rollback notes
06
Executive review
Monthly Detection Engineering Review priorities
07
MSSP view
Partner summary for portfolio revalidation
The guided preview starts with an identity-compromise evidence thread and ends with the assessment handoff your team would review.