Testing QSPI Setup time and Hold time
Look at the SPI command to see if it is a read or write.
QSPI timing can not be verified by oscilloscope measurements.
You must calculate the timing margins based on the worst case timing information in the MCU datasheet and the flash datasheet, the capacitive load, and the latency added by your PCB.
There are lists of timing requirements in both the flash datasheet and the MCU datasheet. Your design must comply with all of them.


Oscilloscope measurement will only give you a "sanity check". You can check that the edges are in the vicinity of the expected typical timing based on your calculations.