AI Misuse Detection Playbook - For SOC teams

What you’ll learn

• 10 AI-misuse patterns (phishing upgrades, deepfake ops, prompt-injection, tool-abuse, code-assist misuse, policy evasion) mapped to ATT&CK + SOC runbooks
• Detection engineering: signals, rules, sample KQL/Sigma, required log sources
• Rapid triage: 15-minute checklist, evidence capture, escalation paths
• Controls & guardrails: rate-limits, content filters, identity & device trust
• Playcards for IR roles, exec/legal/PR comms, metrics & post-mortems

What’s inside

• The Playbook (step-by-step runbooks & checklists)
• Detection starter pack: signals catalogue + sample queries (formats you can adapt)
• Comms pack: internal/external notification templates
• Update path: versioned changelog so your team stays current

Who this is for

• SOC analysts, Detection engineers, Incident responders, Blue team leads

License

• Individual: 1 user
• Redistribution outside your org is not allowed.