<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Phase-Zero on Taha's</title><link>/tags/phase-zero/</link><description>Recent content in Phase-Zero on Taha's</description><generator>Hugo -- gohugo.io</generator><language>en</language><managingEditor>taha.marouani@etudiant-enit.utm.tn (Taha)</managingEditor><webMaster>taha.marouani@etudiant-enit.utm.tn (Taha)</webMaster><copyright>© 2026 Taha</copyright><lastBuildDate>Sun, 23 Aug 2026 14:28:07 +0100</lastBuildDate><atom:link href="/tags/phase-zero/index.xml" rel="self" type="application/rss+xml"/><item><title>Phase 0: Interrogating QRadar's API Before You Trust It</title><link>/blog/1-ibm-wts-api/</link><pubDate>Sun, 23 Aug 2026 14:28:07 +0100</pubDate><author>taha.marouani@etudiant-enit.utm.tn (Taha)</author><guid>/blog/1-ibm-wts-api/</guid><description>Don&amp;rsquo;t assume what a SIEM&amp;rsquo;s REST API can do. Write a prober that asks the live instance, and let the answer shape the architecture.</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="/blog/1-ibm-wts-api/featured.svg"/></item></channel></rss>