TL;DR: Step-three workflow: scheduled recon scans, diff against baseline, notification on change. Frees you for the manual hunting.
Stub — to be filled in.
What it is
TODO
Preconditions / where it applies
TODO
Technique
TODO
Detection and defence
TODO
References