#siem

Detection Engineering for LLM Apps: A MITRE ATLAS Runbook

Mapping LLM application telemetry to MITRE ATLAS techniques. Concrete log shapes, alerting heuristics, and a runbook structure that scales beyond ad-hoc