Building on the work of others and previous CheckMates articles, Tim Hall has put together a nice visual guide!
Upgrading between JHF releases might fail if you also have private fixes installed that were not integrated into the Jumbo Hotfix.
Yes, it's possible to do.
This article digs into what you might find in the Threat Emulation logs.
Some suggested tools you can use to monitor your network (including Check Point gateways).
An older thread that has cropped up with some new suggestions.
Snort is the language you can use to add custom signatures to our IPS. Those signatures can be loaded through the API.