No SIEM, No Problem: Forensic Investigation of a Recent Trivy Supply Chain Compromise with RSigma

Real-world forensic investigation of the Trivy supply chain compromise using RSigma: detecting credential theft across 300K audit events without a SIEM in hours, not days.