Reading a failed control
What a broken access check looks like once the request has already succeeded.
Category
Security Research
Investigations written for practitioners.
Articles in Security Research
Models are not the control
A detection model can rank events. It does not replace the control that should have blocked them.