RC RANDOM CHAOS

telemetry

4 posts

The flat line is the exploit
Article

The flat line is the exploit

A flat SOC dashboard can be defense evasion, not a quiet network. How APTs shape telemetry to land in a pipeline's discard paths, and why the graph is the IOC.

 California registers 3D printers it can't instrument
Article

California registers 3D printers it can't instrument

California's 3D printer registry concentrates reconnaissance data on a fleet of uninstrumented endpoints. The real gap is telemetry and data governance.

 DuckDB trusts persisted blocks attackers control
Article

DuckDB trusts persisted blocks attackers control

DuckDB runs in-process as a C++ library. Its immutability and checksum assumptions create a quiet memory-corruption surface that host EDR never sees.

 Heartbleed was a C bug, not a web bug
Article

Heartbleed was a C bug, not a web bug

CVE-2014-0160 was an out-of-bounds read in OpenSSL C, not a JavaScript flaw. The real mechanism, the network-only telemetry gap, and what survived the patch.