<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Payload-Scan on Taha's</title><link>/tags/payload-scan/</link><description>Recent content in Payload-Scan on Taha's</description><generator>Hugo -- gohugo.io</generator><language>en</language><managingEditor>taha.marouani@etudiant-enit.utm.tn (Taha)</managingEditor><webMaster>taha.marouani@etudiant-enit.utm.tn (Taha)</webMaster><copyright>© 2026 Taha</copyright><lastBuildDate>Wed, 26 Aug 2026 14:28:07 +0100</lastBuildDate><atom:link href="/tags/payload-scan/index.xml" rel="self" type="application/rss+xml"/><item><title>Two Pipelines, One Choice: Converting Sigma to QRadar AQL</title><link>/blog/2-ibm-wts-pipelines/</link><pubDate>Wed, 26 Aug 2026 14:28:07 +0100</pubDate><author>taha.marouani@etudiant-enit.utm.tn (Taha)</author><guid>/blog/2-ibm-wts-pipelines/</guid><description>IBM&amp;rsquo;s pySigma backend ships two conversion pipelines with very different trade-offs, and one of them fails open. Here&amp;rsquo;s how the converter picks, and what it records.</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="/blog/2-ibm-wts-pipelines/featured.svg"/></item></channel></rss>