:root{color-scheme:light;--hf-height:56px;--bg1:#fff;--bg2:#f0f0f0;--bg3:#e0e0e0;--fg1:#1a1a1a;--fg2:#666;--link:#2563eb;--accent:#2563eb;--border:#d1d5db;--btn-hover:#d1d5db;--syn-key:#0550ae;--syn-str:#116329;--syn-num:#953800;--syn-bool:#6639ba;--syn-punct:#666;--kql-string:#a31515;--msg-param:#b91c1c;--highlight-bg:#fef08a;--highlight-fg:#1a1a1a;--tactic-reconnaissance:#6c3483;--tactic-resource_development:#8e44ad;--tactic-initial_access:#c0392b;--tactic-execution:#d35400;--tactic-persistence:#b7950b;--tactic-privilege_escalation:#1e8449;--tactic-stealth:#148f77;--tactic-defense_impairment:#0e6655;--tactic-credential_access:#2471a3;--tactic-discovery:#7d3c98;--tactic-lateral_movement:#c2185b;--tactic-collection:#00838f;--tactic-command_and_control:#5d4037;--tactic-exfiltration:#455a64;--tactic-impact:#c62828;--badge-bg:#374151;--badge-fg:#fff;--indicator-accent:#fbbf24;--green:#16a34a;--yellow:#ca8a04;--blog-accent-green:#15803d;--blog-accent-aqua:#0d9488;--code-bg:#f5f5f7;--tag-bg:#dbeafe;--tag-hover:#bfdbfe}:root{--social-linkedin:#0a66c2;--font-ui:'Segoe UI',-apple-system,system-ui,sans-serif;--font-mono:'Cascadia Code','Consolas','Fira Code',monospace;--icon-rail-width:52px;--tree-panel-width:293px;--detail-panel-width:221px}:root.theme-gruvbox-dark{color-scheme:dark;--bg1:#282828;--bg2:#1d2021;--bg3:#3c3836;--fg1:#ebdbb2;--fg2:#a89984;--link:#83a598;--accent:#fabd2f;--border:#504945;--btn-hover:#504945;--syn-key:#83a598;--syn-str:#b8bb26;--syn-num:#fe8019;--syn-bool:#d3869b;--syn-punct:#a89984;--kql-string:#ce9178;--msg-param:#fabd2f;--highlight-bg:#4a3a10;--highlight-fg:#fabd2f;--badge-bg:#504945;--badge-fg:#ebdbb2;--green:#89d185;--yellow:#e8ab53;--blog-accent-green:#b8bb26;--blog-accent-aqua:#8ec07c;--code-bg:#1d2021;--tag-bg:#0e3a5c;--tag-hover:#124a72;--status-pub-bg:#1a3a1a;--status-pub-border:#2d5a2d;--status-draft-bg:#3a2a1a;--status-draft-border:#5a4a2d}:root.theme-oxocarbon{color-scheme:dark;--bg1:#161616;--bg2:#262626;--bg3:#393939;--fg1:#dde1e6;--fg2:#a2a9b0;--link:#78a9ff;--accent:#be95ff;--border:#525252;--btn-hover:#393939;--syn-key:#78a9ff;--syn-str:#42be65;--syn-num:#ee5396;--syn-bool:#be95ff;--syn-punct:#a2a9b0;--kql-string:#3ddbd9;--msg-param:#08bdba;--highlight-bg:#2a1f47;--highlight-fg:#be95ff;--badge-bg:#525252;--badge-fg:#dde1e6;--green:#42be65;--yellow:#ffe97b;--blog-accent-green:#42be65;--blog-accent-aqua:#3ddbd9;--code-bg:#0d0d0d;--tag-bg:#1c1c3e;--tag-hover:#2a2a5a;--status-pub-bg:#0d331a;--status-pub-border:#198038;--status-draft-bg:#332400;--status-draft-border:#8e6a00}.chroma .lnlinks{outline:0;text-decoration:none;color:inherit}.chroma .lntd{vertical-align:top;padding:0;margin:0;border:0}.chroma .lntable{border-spacing:0;padding:0;margin:0;border:0}.chroma .hl{background-color:var(--bg2)}.chroma .lnt{white-space:pre;-webkit-user-select:none;user-select:none;margin-right:.4em;padding:0 .4em 0 .4em;color:var(--fg2)}.chroma .ln{white-space:pre;-webkit-user-select:none;user-select:none;margin-right:.4em;padding:0 .4em 0 .4em;color:var(--fg2)}.chroma .line{display:flex}.chroma .nt{color:var(--syn-key)}.chroma .s,.chroma .s2,.chroma .s1,.chroma .sa,.chroma .sb,.chroma .sc,.chroma .dl,.chroma .sd,.chroma .se,.chroma .sh,.chroma .si,.chroma .sx,.chroma .sr,.chroma .ss,.chroma .l-Scalar-Plain{color:var(--syn-str)}.chroma .mi,.chroma .mf,.chroma .mh,.chroma .il,.chroma .mb,.chroma .mo{color:var(--syn-num)}.chroma .kc{color:var(--syn-bool)}.chroma .p{color:var(--syn-punct)}.chroma .k{font-weight:bold}.chroma .kd{font-weight:bold}.chroma .kn{font-weight:bold}.chroma .kp{font-weight:bold}.chroma .kr{font-weight:bold}.chroma .kt{font-weight:bold}.chroma .nc{color:var(--syn-key);font-weight:bold}.chroma .no{color:var(--syn-key)}.chroma .nn{color:var(--syn-key)}.chroma .nb{color:var(--syn-bool)}.chroma .bp{color:var(--syn-bool)}.chroma .nv,.chroma .vc,.chroma .vg,.chroma .vi,.chroma .vm{color:var(--fg2)}.chroma .nf,.chroma .fm{color:var(--syn-key)}.chroma .c,.chroma .ch,.chroma .cm,.chroma .c1,.chroma .cs,.chroma .cp,.chroma .cpf{color:var(--fg2);font-style:italic}.chroma .ow{font-weight:bold}html{scrollbar-gutter:stable}@media(prefers-reduced-motion:no-preference){html,.post-body,.blog-index{scroll-behavior:smooth}}body{display:flex;min-height:100dvh;flex-direction:column;margin:0;background-color:var(--bg1);color:var(--fg1);font-family:sans-serif;line-height:1.5;-webkit-text-size-adjust:none;text-size-adjust:none}header,footer,thead,pre,code{background-color:var(--bg2)}kbd{display:inline-block;padding:2px 6px;font-family:monospace;font-size:.875em;line-height:1.2;color:var(--fg1);background-color:var(--bg2);border:1px solid var(--border);border-radius:3px;box-shadow:inset 0 -1px 0 var(--border)}main{width:100%;max-width:1200px;margin:0 auto;padding-inline:2em;padding-block:0;box-sizing:border-box}main>h1:first-child{font-size:1.15rem;margin-top:.75em;margin-bottom:0}article{margin-top:2em}article:not(:last-of-type){padding-bottom:2em;border-bottom:solid 1px var(--fg2)}.metadata{margin:1em 0}.tags{list-style:none;display:inline-flex;gap:.5em;margin:0;padding:0}.tags a{color:var(--fg2);text-decoration:none}:is(h1,h2,h3,h4,h5,h6) .anchor{visibility:hidden}:is(h1,h2,h3,h4,h5,h6):hover .anchor{visibility:visible}p,li{text-align:left}a{color:var(--link);text-decoration:none}a:hover{text-decoration:underline}pre code{padding:0}code{padding:.2em .3em;overflow-wrap:break-word;word-break:break-word}a{overflow-wrap:break-word;word-break:break-word}table{border-collapse:collapse;width:auto;max-width:100%;word-wrap:break-word;overflow-wrap:break-word}td,th{border:solid 1px var(--border)}td,th{padding:.4em .75em}th{font-size:.8rem}.md-content table{display:block;overflow-x:auto}.md-content th:first-child,.md-content td:first-child{white-space:nowrap}pre{padding:1em}pre,.katex{overflow:auto}figure{margin:0}img{width:100%}figcaption{margin-top:1em;color:var(--fg2);text-align:center}.stat-item:not(:last-child)::after{content:",";margin-right:.3em}.table-scroll-wrap{overflow-x:auto;-webkit-overflow-scrolling:touch}.post-authors{display:flex;align-items:center;gap:.4rem;flex-wrap:wrap}.post-author-link{text-decoration:none}.post-author-name{font-weight:600}.author-icons{display:flex;gap:.3rem;align-items:center}.author-social{display:inline-flex;align-items:center;text-decoration:none}.author-social svg{width:18px;height:18px;fill:var(--fg2)}.author-profile{padding:2em 1em;margin-top:2em;border-top:1px solid var(--border);display:flex;gap:1.5em;align-items:flex-start}.author-header{display:flex;gap:1rem;align-items:center}.author-header-content{display:flex;flex-direction:column;gap:.3em;align-items:flex-start}.author-title-row{display:flex;gap:.5em;align-items:center}.author-full-bio{margin-top:.5em}.author-posts{margin-top:1em}.author-row{display:flex;gap:1.5em;align-items:center;margin-bottom:1em}.author-name{font-weight:600;width:10em}.author-name a{text-decoration:none;color:var(--fg1)}.author-links-right{display:flex;gap:.5rem;align-items:center;margin-left:auto}.blog-heading{margin:-1.5rem 0 0 0}.posts-showcase{display:flex;gap:1.5em;flex-wrap:wrap}.post-showcase{flex:1 1 300px}.post-showcase:first-child{flex:1 1 100%;margin-bottom:.5em}.post-showcase-title{font-size:1.15rem}.post-meta{font-size:.85rem;color:var(--fg2)}.post-excerpt{position:relative;overflow:hidden;max-height:6em}.excerpt-fade{position:absolute;bottom:0;left:0;right:0;height:2.5em;background:linear-gradient(transparent,var(--bg1));pointer-events:none}.read-more a{font-size:.85rem;color:var(--link)}.read-more a:hover{text-decoration:underline}.home-sidebar{position:fixed;right:2em;top:calc(var(--hf-height) + 1em);width:14em}.sidebar-section{margin-bottom:1.25rem}.sidebar-title{font-size:.8rem;text-transform:uppercase;color:var(--fg2)}.sidebar-list{list-style:none;padding:0;margin:.35em 0 0;display:flex;flex-direction:column;gap:.2em}.sidebar-list a{color:var(--fg1);font-size:.85rem}.sidebar-list a:hover{color:var(--link)}@media(max-width:820px){.home-sidebar{position:static;width:auto;margin-top:2rem}.event-meta{gap:.3em .75rem}}@media(max-width:768px){.search-pagination{flex-wrap:wrap}}.filter-chip{appearance:none;display:inline-flex;align-items:center;gap:.35rem;font:inherit;font-size:.85rem;color:var(--fg1);background:transparent;border:1px solid var(--border);border-radius:3px;padding:.25rem .55rem;cursor:pointer}.filter-chip:hover{border-color:var(--accent)}.filter-chip--positive{border-color:var(--accent);background:var(--bg2)}@media(max-width:600px){main,.footer-content{padding-left:1em;padding-right:1em}.blog-heading{margin:-1.25rem 0 0 0}.event-catalog-summary{display:none}.event-provider-table td{padding:.5em;font-size:.875rem}.event-provider-table th{padding:.5em;font-size:.65rem}.event-provider-table td:first-child{word-break:break-word}.event-toc-table .col-channel{display:none}.event-toc-table td,.event-toc-table th{padding:.35em .5em;font-size:.8rem}.event-fields-table td,.event-fields-table th{padding:.5em;font-size:.875rem}.filter-chip{padding:.3em .5em;font-size:.7rem}td,th{padding:.5em}pre{padding:.5em}.search-card{padding:.5em}.search-card-primary{font-size:.8rem}.search-card-context{font-size:.75rem;padding-left:.5em}}@media(max-width:480px){main,.footer-content{padding-left:.4em;padding-right:.4em}.event-meta{flex-direction:column;gap:.25em}}header{background-color:var(--bg2);height:var(--hf-height);min-height:var(--hf-height);display:flex;align-items:center;position:relative;box-sizing:border-box;padding:0;border-bottom:1px solid var(--border);flex-shrink:0}.navbar{width:100%;height:100%;display:grid;grid-template-columns:1fr max-content 1fr;column-gap:.75rem;align-items:center;padding:0 .75rem;box-sizing:border-box;position:relative;background:inherit;font-family:sans-serif}.site-logo{display:inline-block;width:40px;height:40px;color:var(--fg1);margin-right:.5rem}.site-logo .icon{display:block}.site-brand{grid-column:2;display:flex;align-items:center;gap:.5rem;text-decoration:none}.header-title{color:var(--fg1);text-decoration:none;font-weight:600;font-size:1rem}.header-actions{grid-column:3;justify-self:end;display:flex;align-items:center;gap:2rem}.header-action-link{color:var(--fg1);text-decoration:none;font-size:.8125rem;font-weight:600;white-space:nowrap;display:flex;align-items:center}.header-action-link:hover,.header-action-link.active{color:var(--link);text-decoration:none}.btn-icon{background:0;border:0;color:var(--fg1);cursor:pointer;padding:0;display:flex;align-items:center}.btn-icon:hover{color:var(--link)}.help-btn{font-size:.6875rem;font-weight:600;font-family:inherit;white-space:nowrap}.icon{display:inline-block;background-color:currentColor;-webkit-mask-size:contain;mask-size:contain;-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-position:center;mask-position:center}.icon-sun{width:14px;height:14px;-webkit-mask-image:url("data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%2024%2024'%20fill='none'%20stroke='black'%20stroke-width='2'%20stroke-linecap='round'%20stroke-linejoin='round'%3E%3Ccircle%20cx='12'%20cy='12'%20r='5'/%3E%3Cline%20x1='12'%20y1='1'%20x2='12'%20y2='3'/%3E%3Cline%20x1='12'%20y1='21'%20x2='12'%20y2='23'/%3E%3Cline%20x1='4.22'%20y1='4.22'%20x2='5.64'%20y2='5.64'/%3E%3Cline%20x1='18.36'%20y1='18.36'%20x2='19.78'%20y2='19.78'/%3E%3Cline%20x1='1'%20y1='12'%20x2='3'%20y2='12'/%3E%3Cline%20x1='21'%20y1='12'%20x2='23'%20y2='12'/%3E%3Cline%20x1='4.22'%20y1='19.78'%20x2='5.64'%20y2='18.36'/%3E%3Cline%20x1='18.36'%20y1='5.64'%20x2='19.78'%20y2='4.22'/%3E%3C/svg%3E");mask-image:url("data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%2024%2024'%20fill='none'%20stroke='black'%20stroke-width='2'%20stroke-linecap='round'%20stroke-linejoin='round'%3E%3Ccircle%20cx='12'%20cy='12'%20r='5'/%3E%3Cline%20x1='12'%20y1='1'%20x2='12'%20y2='3'/%3E%3Cline%20x1='12'%20y1='21'%20x2='12'%20y2='23'/%3E%3Cline%20x1='4.22'%20y1='4.22'%20x2='5.64'%20y2='5.64'/%3E%3Cline%20x1='18.36'%20y1='18.36'%20x2='19.78'%20y2='19.78'/%3E%3Cline%20x1='1'%20y1='12'%20x2='3'%20y2='12'/%3E%3Cline%20x1='21'%20y1='12'%20x2='23'%20y2='12'/%3E%3Cline%20x1='4.22'%20y1='19.78'%20x2='5.64'%20y2='18.36'/%3E%3Cline%20x1='18.36'%20y1='5.64'%20x2='19.78'%20y2='4.22'/%3E%3C/svg%3E")}.icon-menu{width:16px;height:16px;-webkit-mask-image:url("data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%2024%2024'%20fill='none'%20stroke='black'%20stroke-width='2'%20stroke-linecap='round'%3E%3Cline%20x1='3'%20y1='6'%20x2='21'%20y2='6'/%3E%3Cline%20x1='3'%20y1='12'%20x2='21'%20y2='12'/%3E%3Cline%20x1='3'%20y1='18'%20x2='21'%20y2='18'/%3E%3C/svg%3E");mask-image:url("data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%2024%2024'%20fill='none'%20stroke='black'%20stroke-width='2'%20stroke-linecap='round'%3E%3Cline%20x1='3'%20y1='6'%20x2='21'%20y2='6'/%3E%3Cline%20x1='3'%20y1='12'%20x2='21'%20y2='12'/%3E%3Cline%20x1='3'%20y1='18'%20x2='21'%20y2='18'/%3E%3C/svg%3E")}.icon-shield{width:40px;height:40px;-webkit-mask-image:url("data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%2064%2064'%3E%3Cpath%20d='M32%204l24%208V28c0%2016-12%2027-24%2032C20%2055%208%2044%208%2028V12z'%20fill='none'%20stroke='black'%20stroke-width='3'/%3E%3Cpath%20d='M32%2018l4%2012%208%204-8%204-4%2012-4-12-8-4%208-4z'%20fill='black'/%3E%3C/svg%3E");mask-image:url("data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%2064%2064'%3E%3Cpath%20d='M32%204l24%208V28c0%2016-12%2027-24%2032C20%2055%208%2044%208%2028V12z'%20fill='none'%20stroke='black'%20stroke-width='3'/%3E%3Cpath%20d='M32%2018l4%2012%208%204-8%204-4%2012-4-12-8-4%208-4z'%20fill='black'/%3E%3C/svg%3E")}.nav-check-hidden{position:absolute;opacity:0;pointer-events:none}.nav-toggle{display:none}.nav-links{display:contents}.theme-cycle-btn{padding:.3rem;justify-content:center;border-radius:4px}@media(max-width:600px){header{height:auto;min-height:auto;padding:.5rem 0}.navbar{min-height:auto;padding:0 .625rem}.site-brand{grid-column:auto;position:absolute;left:50%;transform:translateX(-50%);width:max-content;height:var(--hf-height)}.site-logo{width:34px;height:34px}.site-logo .icon-shield{width:34px;height:34px}.header-title{font-size:1rem}.header-actions{flex-direction:row;align-items:center;gap:1rem}.help-btn{display:none}.nav-toggle{display:flex}.nav-toggle .icon-menu{width:20px;height:20px}.nav-links{display:none;position:absolute;top:calc(100% + 4px);right:0;background:var(--bg2);border:1px solid var(--border);border-radius:4px;min-width:140px;box-shadow:0 4px 12px rgba(0,0,0,0.3);z-index:1001;padding:.25rem 0;flex-direction:column}#nav-check:checked ~ .nav-links{display:flex}#nav-check:focus-visible ~ .nav-toggle{outline:2px solid var(--link);outline-offset:2px}.nav-links .header-action-link{font-size:.8125rem;padding:.5rem 1rem}.nav-links .header-action-link:hover{background:var(--btn-hover)}}@media(max-width:350px){.header-title{font-size:.875rem}}.help-overlay{border:0;padding:0;background:transparent;overflow:visible;inset:0;margin:auto}.help-overlay:popover-open{display:flex;align-items:center;justify-content:center}.help-overlay::backdrop{background:rgba(0,0,0,0.5)}.help-panel{position:relative;background:var(--bg2);border:1px solid var(--border);border-radius:6px;box-shadow:0 8px 24px rgba(0,0,0,0.4);max-width:min(640px,92vw);width:auto;padding:1.25em 1.75em;max-height:85vh;overflow-y:auto}.help-panel h2{margin:0 0 .5em;font-size:.95rem}.help-panel h2+.help-table{margin-bottom:1.1em}.help-table{width:100%;border-collapse:collapse;font-size:.85rem;table-layout:auto}.help-table td{padding:.2em .75em .2em 0;vertical-align:top;border:0;color:var(--fg2)}.help-table td:first-child{white-space:nowrap;color:var(--fg1);width:1%}.help-table code{font-size:.95em;background:var(--bg3);padding:0 .25em;border-radius:2px}.help-nav-link{margin:.25em 0 0;font-size:.85rem;color:var(--fg2)}.hint-label{position:absolute;top:0;left:100%;z-index:500;background:var(--accent);color:var(--bg1);font:bold 11px/1 monospace;text-transform:uppercase;padding:2px 4px;border-radius:3px;white-space:nowrap;pointer-events:none;transform:translate(2px,-100%);box-shadow:0 1px 3px rgba(0,0,0,.35)}.hint-label--hidden{display:none}