Anomaly Detection & Alert Runbook
An operator-facing runbook that translates anomaly signals into repeatable containment and verification steps.
Defines alert severity tiers, immediate containment actions, data checks to validate false positives, escalation path, and post-incident RCA triggers.
Discussion
Comments and conversation will live here.