PROFESSIONAL • SOC Orchestration

velociraptor Threat Validation Procedure #29

Lesson context: SOC Orchestration (Professional level). velociraptor Threat Validation Procedure #29 teaches a defensive workflow for velociraptor with immutable audit trail. Scenario: internal CI pipeline (harden service-to-service trust boundaries). At Professional level, this lesson emphasizes practical controls and measurable risk reduction. Command focus: velociraptor, timesketch, misp; objective: harden service-to-service trust boundaries.