ORIGINAL FICTIONAL TEACHING EVIDENCE
12:00Z nslookup portal.northbank.example answer=192.0.2.80
12:00:01Z TCP dst=192.0.2.80:443 handshake=complete
12:00:02Z TLS expected=portal.northbank.example presented=files.northbank.example identity-check=FAIL
12:00:03Z HTTP application-request=not-sent
