InOffensiveBytesbyRushikesh·Oct 13Bridging the Semantic Gap: Agentless Runtime Detection via Hypervisor TrapsA reference architecture for monitoring agent-hostile VMs using LibVMI and Wazuh.
Adilansary·Sep 25From “Probably Working” to “Confirmed”: What Security Testing Changed About My QA MindsetOne of the more uncomfortable lessons I learned while testing security products was that a technically reasonable explanation can still be…
Adilansary·Sep 22The Dashboard Shows Nothing — But Is the Detection Actually Broken?In the previous post, I wrote about security components that looked healthy even though they were not producing the expected output.
Adilansary·Sep 20When “Healthy” Doesn’t Mean Working: Testing a SIEM/XDR as an SQA EngineerOne of the first things I learned while testing a SIEM/XDR platform was that a green status indicator doesn’t necessarily mean very much.
Anurag Singh·Sep 2Your Security Tools Are Working. So Why Did the Attack Still Get Through?The firewall blocked what it could. EDR detected what it saw. SIEM collected the events. So how did the attacker still reach sensitive…
