> For the complete documentation index, see [llms.txt](https://0xzoro.gitbook.io/0xzoro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://0xzoro.gitbook.io/0xzoro/soc-operations/detection-engineering/summary.md).

# SUMMARY

* [Course Reference & Detection-as-Code Architecture](broken://pages/faea9b510ff38567c8c25289bd8fbd684ef8fdf4)
* [Note-Taking Standard](broken://pages/28f9a000c99d2b8a9ccb58770e3faedf4f7a7384)

## Course — TCM Detection Engineering for Beginners

* [1. Introduction, Theory & Lab Setup](broken://pages/ae2048895c29a5ed3bc471a1a063616741749379)
* [2. Elastic Setup](broken://pages/f3acfa2bc9b35a2807f893b1aff7ed8b20d9b013)
* [3. Attack Scenarios & Atomic Red Team](broken://pages/eb4c11b1c9c07081ce9c165e71d39167d153be88)
* [4. TOML & Detection-as-Code](broken://pages/3a2274369e9fa3e0eca7dea2017585786e7476a5)
* [5. Elastic API, GitHub & Metrics](broken://pages/f961baa40304dc85f571d841950b2c9c2211a651)