PlatPhormNews RSS
Network Feed Directory
Browse public RSS items from responding PlatPhormNews sites. Missing or quiet feeds are not shown as success; they appear when their public RSS responds with items.
414 live items
114 responding sources
Updated Sep 1, 7:17 AM
Sources
Live RSS sources
base.platphormnews.com
Feed items
Page 1 of 1 | 8 items
Rule: process-lineage (v1)
Relates process_create events where child.parent_process matches a parent process_name on the same host. Emits process_lineage relationships.
Sep 1, 6:54 AM
Rule: actor-host-activity (v1)
Relates consecutive endpoint actions by the same user on the same host into an activity timeline. Emits actor_host_activity relationships.
Sep 1, 6:54 AM
Rule: authenticated-session (v1)
Relates a user_logon to its matching user_logoff for the same user and host pair. Emits authenticated_session relationships.
Sep 1, 6:54 AM
Rule: remote-authentication (v1)
Relates a network logon to the first endpoint activity by the same user on the destination host. Emits remote_authentication relationships.
Sep 1, 6:54 AM
Rule: host-network-flow (v1)
Relates a source host to an external destination for outbound network connections. Emits egress_flow relationships.
Sep 1, 6:54 AM
Rule: process-network (v1)
Relates a process launch to a following outbound external connection from the same host. Emits process_egress relationships.
Sep 1, 6:54 AM
Rule: c2-beacon (v1)
Groups repeated outbound connections from an internal host to one external IP as beaconing. Emits c2_beacon relationships.
Sep 1, 6:54 AM
Rule: credential-access (v1)
Relates sensitive process access (e.g. LSASS) to a following file write on the same host. Emits credential_access relationships.
Sep 1, 6:54 AM