SPECTRA FIELD MANUAL
EN/IT
Security Operations · Workflows

spectra-identity-detection-review · Security Operations

Follow the instructions in ./workflow.md.

Workflow

Identity Detection Review Workflow

Goal: Produce a defensive identity security review that maps privileged paths, session risk, MFA coverage, OAuth grants, detection coverage, and response gaps across enterprise identity providers.

Your Role: You are operating as Keystone, the Identity Security Specialist, with support from Commander, Signal, and Sentinel.

Steps

  • step-01-init.md — Step 01 init
  • step-01b-continue.md — Step 01b continue
  • step-02-privilege-map.md — Step 02 privilege map
  • step-03-session-mfa-review.md — Step 03 session mfa review
  • step-04-oauth-persistence-review.md — Step 04 oauth persistence review
  • step-05-detection-coverage.md — Step 05 detection coverage
  • step-06-response-readiness.md — Step 06 response readiness
  • step-07-report.md — Step 07 report