How Red Team Reconnaissance Shows Up as SOC Alerts

Reconnaissance is often treated as a “quiet” phase of an attack — something that happens before detection becomes relevant. In practice, this isn’t true. Many red team reconnaissance techniques generate signals that surface directly in SOC tools, oft...