Tag
event-correlation
- Jul 11, 2026 Correlating Logs Across Devices When Clocks Disagree How clock offset and resolution error bound the accuracy of a merged timeline, and how to order events from independent devices without trusting their timestamps. networking
- Apr 26, 2025 Clock Skew and the Limits of Cross-Host Event Ordering Where host clocks diverge, how much error an unsynchronized timeline carries, and which ordering conclusions survive when timestamps from different machines are merged. security
- May 23, 2022 Lateral Movement Inferred from Authentication Records How a domain authentication log encodes the machine a logon came from, why that field is forgeable, and which patterns distinguish traversal from ordinary administration. security