Exploit Public-Facing Application – multi-signal correlation (request → error → post-exploit process/egress)