SOP-15: Supply Chain Attack Detection & Response

Analyst playbook for software supply chain attacks — malicious packages, vendor compromise (SolarWinds-class), dependency confusion, build runner forensics, SBOM exposure check, secret rotation.