Wv

Wieger van der Meulen

InfoSec - Principal Security Assurance Analyst

Articles by Wieger van der Meulen

13 million tool calls: auditing every AI coding agent action with Elastic Agent

Cursor hooks and Elastic Agent capture every tool call, shell command, file read and MCP request as structured events you can hunt with ES|QL.

Wieger van der Meulen

The security signal log tailing can't see: tracking npm cooldown removals with Elastic Agent

A 40-line CEL integration snapshots .npmrc files every 6 hours to catch cooldown removals. This post walks through the three ways we broke filestream before landing on snapshot semantics.

Wieger van der Meulen