- Engineer — Learn: Academic thesis proposing game-theoretic models for AD attack-path hardening, including dynamic graph defense and honeypot placement. No patch or configuration change needed today, but the prioritization framework could inform future AD remediation planning.
- SOC/IR — Learn: The decoy/honeypot placement model—designed to maximize worst-case incident response time in dynamic AD environments—is worth reading for analysts building deception layers, though no actionable detection content or IOCs are included.
- Leader — Skip