Hi, I’m B. Mensah — building testable detection-engineering labs

[bsmensah-ctrl]

Introduce yourself

Hi everyone — I’m B. Mensah, a student interested in detection engineering and the gap between writing a rule and proving its correlation logic behaves under positive, incomplete, reordered, and noisy event streams. I’m here to learn from maintainers, contribute to open source, and share what survives real review.

Links (optional)

https://github.com/bsmensah-ctrl/DLL-Injection-Lab
https://bsmensah-ctrl.github.io/DLL-Injection-Lab/

Where are you in your GitHub journey?

Maintaining a project or repo owner

And where are you going next on GitHub?

My next step is to add more realistic negative controls, keep taking outside review seriously, and contribute useful improvements to other security projects.

What technical skills or projects are you working on?

I’m working with Python, SARIF, deterministic security telemetry, and regression testing. My current project models a five-signal DLL-injection detection chain using synthetic events only—no live-process access or DLL injection—and now has 35 tests plus a browser demo.

Got a question for us? (optional)

How do other detection-tool maintainers decide which near-miss controls belong beside a positive fixture?