People don't consider adversarial inputs when building scripts, which is one of the main reasons why I started a company to build an incident response platform

People don't consider adversarial inputs when building scripts, which is one of the main reasons why I started a company to build an incident response platform in 2018. I was handling security incidents on a large scale with tools that attackers would purposely circumvent with special filenames/inputs. Instead of fighting against the grain, I decided to build a platform with a heavy focus on correctness. Any deviation from the data specification would stick out as a sore thumb and immediately detect anti-forensics and other tricks. Today, I have a vast compendium of anti-forensics tricks, such as commands not getting written to history, files that cannot be deleted or copied, and much more. Suffice to say that if you are parsing the output of any tool, you are vulnerable to a whole slew of adversarial techniques.