The sections on attack vectors, modes of detection and response, etc were published today

It was published in instalments, which is a bit confusing

There's a bit about interfacing with infrastructure teams in one of the later instalments also