<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Validation on Taha's</title><link>/tags/validation/</link><description>Recent content in Validation on Taha's</description><generator>Hugo -- gohugo.io</generator><language>en</language><managingEditor>taha.marouani@etudiant-enit.utm.tn (Taha)</managingEditor><webMaster>taha.marouani@etudiant-enit.utm.tn (Taha)</webMaster><copyright>© 2026 Taha</copyright><lastBuildDate>Fri, 04 Sep 2026 14:28:07 +0100</lastBuildDate><atom:link href="/tags/validation/index.xml" rel="self" type="application/rss+xml"/><item><title>Proving a Detection Actually Fires</title><link>/blog/5-ibm-wts-validation/</link><pubDate>Fri, 04 Sep 2026 14:28:07 +0100</pubDate><author>taha.marouani@etudiant-enit.utm.tn (Taha)</author><guid>/blog/5-ibm-wts-validation/</guid><description>Simulate the attack with Atomic Red Team, then re-run the rule&amp;rsquo;s own converted query over the attack window and ask it directly whether it matched. not_triggered is the honest answer.</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="/blog/5-ibm-wts-validation/featured.svg"/></item></channel></rss>