Discernible Debrief: 11.11.26

When an attacker uses your own process, what do you say first? This drill puts a PHP package registry's Trust & Safety Lead in that exact position.