Introducing EvidenceForge: Synthetic security logs that don’t look (as) fake

EvidenceForge is an open-source synthetic data engine from Cisco Talos that generates realistic, causally consistent security telemetry across 20+ formats (Windows, Linux, Zeek, EDR, IDS, etc.) for training, detection testing, and ML. It uses a canonical event model, shared context objects, sensor-aware emission, timing models (Hawkes process, periodic envelopes), and AI-assisted scenario authoring to produce correlated datasets plus companion ENVIRONMENT.md and GROUND_TRUTH.md documents.