[toluda17]

Summary

I've added the learning objectives, prerequisites, six lesson outlines, module boundaries and supporting references for Core Module 07. I've also filled in the draft module metadata.

Related Issue

Closes #16

Contribution Type

• Core curriculum
• Domain track
• Platform track
• Advanced track
• Lab
• Dataset
• Documentation
• Governance / project maintenance

Validation

• I understand and can defend the technical content in this contribution.
• I verified technical claims, examples, and references.
• This contribution is substantially my own work.
• This contribution does not contain proprietary, confidential, or improperly licensed material.
• I reviewed the relevant contribution guidelines.
• All commits are signed off (git commit -s) per the DCO.

Review Requested

• Technical accuracy
• Operational realism
• Curriculum structure
• Instructional quality
• Vendor neutrality
• Lab / dataset validation
• General review

Affiliations / Conflicts

None

Additional Context

None

[mndtrcks]

Looks good, should be ready to start getting lesson material together.

Suggested references to review and consider adding:

Lesson 3: Rule Formats and Metadata

• Sigma Rules Specification v2.1.0 (same entry Module 04 cites): https://sigmahq.io/sigma-specification/specification/sigma-rules-specification.html
• pySigma: https://github.com/SigmaHQ/pySigma
• sigma-cli: https://github.com/SigmaHQ/sigma-cli

Lesson 4: Code Review for Detections

• Google Engineering Practices, Code Review Developer Guide: https://github.com/google/eng-practices/blob/master/review/index.md

Lesson 5: Continuous Integration for Detections

• pre-commit framework: https://pre-commit.com
• Splunk contentctl: https://github.com/splunk/contentctl
• Splunk security_content: https://github.com/splunk/security_content

Lesson 6: Automated Deployment and Release

• Google SRE Book, Ch. 8, Release Engineering: https://sre.google/sre-book/release-engineering/
• OWASP Top 10 CI/CD Security Risks: https://owasp.org/www-project-top-10-ci-cd-security-risks/