This appendix collects the fuller versions of the artefacts that the chapters introduce in shorter form. It takes the YAML and JSON blocks of Chapters 5 to 28 that are worked examples, practical guides or at least 15 lines long, and presents them in the order of the chapters, so that a complete record, manifest, policy or playbook can be read in one place.
All of these artefacts are illustrative. The organisations, identifiers and figures are fictional and are provided for teaching; they are not a record of any real system or person.
The appendix contains no attack tooling. Its blocks are detections, closure policies, playbook and mandate manifests, records, reviews, role charters and reporting configurations, and none contains exploit code, malware, payloads or step-by-step intrusion instructions. Each block is copied verbatim under a heading that names the section of its chapter, so the text can be checked against the chapter that introduces it.
Primary topics explored
- About this appendix
- How to use this appendix
- Chapter 5: Anticipate
- Chapter 6: Detect
- Chapter 7: Triage Transformed
- Chapter 8: Investigate
About AI Blue
AI Blue is Book 8 of The Transformed Architecture. It examines how the blue team, the people and functions that defend an organisation, is transformed when artificial intelligence takes part in their work: anticipating, detecting, investigating, responding and learning, the team's own AI and how to verify and protect it, operating models, roles, decision rights, regulation and measurement, and the careers and wellbeing of the people involved, for European enterprises and public authorities.
It builds on the conclusions of Architecture as Code, AI Governance, AI Platform and Security, AI Red Team, AI Threat, The Transformed Security Architect and AI Boss.
Chief information security officers, heads of security operations, SOC managers, analysts, detection engineers and incident commanders, security and AI architects, boards and management bodies, procurement leads, works councils and unions, data protection and audit functions, and public-sector leaders.
Gunnar Nordqvist
Conceived, directed and published the books of The Transformed Architecture.
Continue with the full chapter
Appendix A: Appendix A: Code Examples: Detection, Case, Playbook and Mandate Artefacts in AI Blue gives the detailed explanations, practical examples and implementation patterns behind this summary.
This whitepaper belongs to “Appendices” and is one of 32 drawn from the manuscript.