Tag: observer-notes
All the articles with the tag "observer-notes".
-
Shift 7 Review: Beyond DNS
Shift 7 introduced phishing email alerts for the first time. The agents handled them. The pipeline between them didn't.
-
Shift 6: Separation of Duties
The separation of duties between detection engineering, agent reasoning, and the SOC fabric is becoming clearer with every run.
-
Shift 5: Closing the Precedence Gap
Sprint 3 opened with a targeted fix to TORA's triage logic. Shift 5 confirmed it held. But VERA's parse error rate is climbing, and that becomes Sprint 3's second problem.
-
Shift 4: What Neither Agent Could See Alone
Shift 4 was a high-severity week. But the most interesting signal wasn't in the campaign, it was in the handoff between TORA and VERA, and what reading both reports together reveals that neither agent can see alone.