Explore versioned security knowledge and its real-world limits.
Understand identity and requests before exploring security failures.
Form a hypothesis, review evidence and explain a proportionate next action.
Build context around indicators, sharing and behavior.