Threat-Emulation on Taha's/tags/threat-emulation/Recent content in Threat-Emulation on Taha'sHugo -- gohugo.ioentaha.marouani@etudiant-enit.utm.tn (Taha)taha.marouani@etudiant-enit.utm.tn (Taha)© 2026 TahaFri, 04 Sep 2026 14:28:07 +0100Proving a Detection Actually Fires/blog/5-ibm-wts-validation/Fri, 04 Sep 2026 14:28:07 +0100taha.marouani@etudiant-enit.utm.tn (Taha)/blog/5-ibm-wts-validation/Simulate the attack with Atomic Red Team, then re-run the rule’s own converted query over the attack window and ask it directly whether it matched. not_triggered is the honest answer.Infra Kes7a - Red Team Infrastructure Overview/blog/0-red-team-infra-overview/Wed, 01 Apr 2026 14:28:07 +0100taha.marouani@etudiant-enit.utm.tn (Taha)/blog/0-red-team-infra-overview/A technical overview on Infra Kes7a, a resilient red team infrastructure.