CISA’s Tale of Two SOCs shows why network segmentation alone is not enough. This guide turns its red-team lessons into seven practical detection checks for a safer lab.