Security incidents rarely announce themselves all at once. And they almost never hinge on a single missed alert. But they do succeed because weak signals accumulate quietly across time, tools, and environments until no one can confidently reconstruct the full story.