A wake vortex is the swirling airflow left behind by a moving object. In fluid dynamics, it forms because the object disturbs the air around it, creating rotating pockets of lower-pressure, turbulent flow. The effect is invisible, but it can influence anything following behind, from another aircraft to sensor readings in a controlled test.
In cyber security, the idea is useful as an analogy for the hidden trail an action leaves behind. An attacker may trigger obvious activity, but the more important clues are often in the wake: logs, network timing, DNS queries, cache changes, or subtle configuration drift. Defenders look for these residual effects to reconstruct what happened, detect stealthy movement, and validate whether an event was a benign system action or part of an intrusion. The lesson is simple: the visible event is rarely the whole story.