Worked on the G-Core/product-documentation repository to clarify the behavior of DDoS Detection Mode, focusing on improving user understanding and reducing support queries. Updated Markdown-based documentation to explain that DDoS detection operates in Monitoring mode without active enforcement, and provided clear guidance for users to switch to Protection mode for full DDoS protection. Emphasized accurate analytics reporting by aligning documentation with product behavior, ensuring users are aware that event logging remains visible in Monitoring mode. Applied technical writing and documentation skills to deliver a single targeted feature, prioritizing accuracy and user guidance over code changes or bug fixes during this period.