# Detection Scenario Platform

> Documentation for Detection Scenario Platform (DSP) — realistic security traffic generation, evidence collection, and XDR/NDR POC validation.

- [Detection Scenario Platform](https://dsp.xdr.ooo/index.md): Generate realistic security activity, collect evidence, and make XDR/NDR POC value visible and repeatable.
- [Quick Start](https://dsp.xdr.ooo/quickstart.md): Install DSP and run a first customer-POC scenario set in minutes.
- [Customer POC Program](https://dsp.xdr.ooo/poc-program.md): A repeatable DSP workflow for turning generated activity into customer-visible XDR evidence.
- [Installation](https://dsp.xdr.ooo/installation.md): Install or update DSP with the supported bootstrap workflow.
- [Configuration & Profiles](https://dsp.xdr.ooo/configuration.md): Configure target scope, execution mode, and DSP operational profiles.
- [Execution Modes](https://dsp.xdr.ooo/execution-modes.md): Run DSP locally or through validated webshell providers.
- [Scenario Coverage](https://dsp.xdr.ooo/scenarios.md): Current DSP scenarios for network, DNS, web, identity, and endpoint-oriented POC validation.
- [CLI Reference](https://dsp.xdr.ooo/cli-reference.md): Operator and advanced command-line options for the DSP v1.4.0 runtime.
- [3rd-Party Alert & Case Demo](https://dsp.xdr.ooo/third-party-alert-case-demo.md): Use DSP-generated activity to demonstrate how external alerts, NDR detections, and EDR alerts can support one XDR investigation story.
- [Reports & Evidence](https://dsp.xdr.ooo/reports-and-evidence.md): Understand DSP Event Store, reports, validation output, traffic summaries, and manual verification artifacts.
- [Validation Status](https://dsp.xdr.ooo/validation-status.md): Current DSP v1.4.0 provider and runtime validation boundaries.
- [Safety & Guardrails](https://dsp.xdr.ooo/safety-and-guardrails.md): Use DSP only in authorized POC scopes and understand the built-in target and execution safeguards.
- [Troubleshooting](https://dsp.xdr.ooo/troubleshooting.md): Common installation, profile, target-scope, webshell, and evidence issues in DSP.
- [Architecture](https://dsp.xdr.ooo/architecture.md): High-level DSP architecture from operator CLI through discovery, execution, Event Store, validation, reporting, and evidence.
- [Release Notes](https://dsp.xdr.ooo/release-notes.md): Customer-facing summary of DSP v1.4.0 and the major operator changes from v1.3.0 and v1.2.0.