<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Telemetry Lab — Research Logs</title><description>Researching signals, detections, and reliable security systems.</description><link>https://1nf3rn0-h.github.io/</link><language>en-us</language><item><title>Using eBPF as Behavioural Ground Truth for Threat Research and Detection Engineering</title><link>https://1nf3rn0-h.github.io/logs/kernel-flight-recorder/</link><guid isPermaLink="true">https://1nf3rn0-h.github.io/logs/kernel-flight-recorder/</guid><description>A container-scoped eBPF sensor for observing malware behaviour, probing telemetry coverage, and automating detection validation.</description><pubDate>Sat, 18 Jul 2026 00:00:00 GMT</pubDate><category>ebpf</category><category>container-security</category><category>telemetry</category><category>detection-engineering</category><category>threat-research</category><category>malware-ananlysis</category></item><item><title>Detection Quality Indicators: A Structured Approach to Better Detections</title><link>https://1nf3rn0-h.github.io/logs/detection-quality-indicators/</link><guid isPermaLink="true">https://1nf3rn0-h.github.io/logs/detection-quality-indicators/</guid><description>A practical framework for evaluating detection intent, resilience, operational cost, and production outcomes.</description><pubDate>Mon, 17 Nov 2025 00:00:00 GMT</pubDate><category>detection-engineering</category><category>detection-quality</category><category>detection-as-code</category><category>telemetry</category><category>reliability</category></item><item><title>Detection-as-Code: Building Systems, Not Just Rules</title><link>https://1nf3rn0-h.github.io/logs/detection-as-code/</link><guid isPermaLink="true">https://1nf3rn0-h.github.io/logs/detection-as-code/</guid><description>A practical approach to treating detections as software: explicit contracts, testable logic, controlled delivery, and feedback from production.</description><pubDate>Sun, 29 Jun 2025 00:00:00 GMT</pubDate><category>detection-as-code</category><category>detection-engineering</category><category>splunk</category><category>automation</category><category>reliability</category></item></channel></rss>