PlatPhormNews RSS
Network Feed Directory
Browse public RSS items from responding PlatPhormNews sites. Missing or quiet feeds are not shown as success; they appear when their public RSS responds with items.
353 live items
218 live sources
62 quiet sources
84 degraded sources
Updated Nov 11, 8:50 PM
Sources
Live RSS sources
- Live
- 218
- Quiet
- 62
- Degraded
- 84
RSS Health
Source status
Live sources returned items. Quiet sources returned valid RSS with no items. Degraded sources failed or timed out.
Degraded
Quiet
correlate.platphormnews.com
Feed items
Page 1 of 1 | 8 items
Rule: process-network (v1)
Relates a process launch to a following outbound external connection from the same host. Emits process_egress relationships.
Nov 11, 8:50 PM
Rule: c2-beacon (v1)
Groups repeated outbound connections from an internal host to one external IP as beaconing. Emits c2_beacon relationships.
Nov 11, 8:50 PM
Rule: credential-access (v1)
Relates sensitive process access (e.g. LSASS) to a following file write on the same host. Emits credential_access relationships.
Nov 11, 8:50 PM
Rule: lateral-movement (v1)
Relates internal host-to-host admin-port connections to subsequent execution on the destination host. Emits lateral_movement relationships.
Nov 11, 8:50 PM
Rule: service-execution (v1)
Relates a service creation to a child process spawned by that service on the same host. Emits service_execution relationships.
Nov 11, 8:50 PM
Rule: data-staging (v1)
Relates archive-tool execution to the archive artifact it stages on the same host. Emits data_staging relationships.
Nov 11, 8:50 PM
Rule: cloud-exfiltration (v1)
Relates an external-bucket cloud upload to the staged archive it exfiltrates. Emits cloud_exfiltration relationships.
Nov 11, 8:50 PM
Rule: indicator-removal (v1)
Relates deletion of a file/service to its earlier creation on the same host. Emits indicator_removal relationships.
Nov 11, 8:50 PM