The Threat Sketch brief names asset, path, harm, evidence, and first response. Which recurring signals deserve a short sketch before they become a larger review item?
