The Eviction Challenge — How Sunny (SOC) Stopped APT28 at E-Corp

Using MITRE ATT&CK to map, hunt, and remediate an APT attack — technical, practical, and ready for SOC playbooks.