Detection and alertingMonitor active resourcesReview resources considered maliciousReview changed scriptsConfigure alerts