Red Canary

https://www.zscaler.com/blogs/cybersecurity-best-practices

Red Canary detection engineering and IR. URL UPDATED 2026-05-08 to the RSS feed: /resources-center/category/blog/ returned a STUB (resource hub navigation) on WebFetch, but /feed/ returns 5 dated items cleanly. Drill into the canonical /blog/<slug>/ URL when citing. | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → rss: python3 tools/fetch_source.py feed https://redcanary.com/feed/ 5 (then bridge url <blog/<category>/<slug>/> for full body). AVOID: /resources-center/ hub is a navigation stub to WebFetch, use the /feed/ RSS, not the resource hub. | 2026-07-05 admiralty audit: B, original detection-engineering/IR research lab, first-hand MDR telemetry. Live via /feed/; active retained. | 2026-07-24 health-sweep flagged /feed/ RSS unreachable (fast-fail during concurrent probe), but direct `python3 tools/fetch_source.py url https://redcanary.com/blog/` returned full live HTML; a reachable transport exists, so NOT demoted (transient feed-probe failure, not source death). When the RSS endpoint flaps, fall back to url/bridge on /blog/. active retained. | 2026-10-15 (S3): redcanary.com/blog and per-article URLs now 301 to zscaler.com/blogs/...; redcanary.com/feed/ is frozen at 2026-08-20. Working recipe: `feed https://www.zscaler.com/blogs/feeds/cybersecurity-best-practices 15`. Nothing in window. | 2026-10-11 quality audit: redcanary.com/blog now serves the Zscaler blog index and the feed has nothing after 2026-08-20; re-check at the next audit and retire or repoint the record. | 2026-10-20 (2026-10-20T0256Z-intel) S3: feed still frozen at 2026-08-20 and /blog/ serves the Zscaler blog index; working repoint `feed https://www.zscaler.com/blogs/feeds/cybersecurity-best-practices 15` (carried to the audit). | 2026-10-20 (2026-10-20T0256Z-intel) main: source_health flagged stale-content (newest 2026-08-20). Red Canary is now part of Zscaler and its posts (monthly Intelligence Insights among them) appear on the Zscaler blog; rss_url and url repointed to https://www.zscaler.com/blogs/feeds/cybersecurity-best-practices (dated feed, newest 2026-10-08), content_scope general-news because the feed also carries Zscaler marketing posts. | 2026-10-20 (cleanup W6-01, 2026-10-11 audit recommendation 5 decided): repointed to the Zscaler blog feed by 2026-10-20T0256Z-intel (Red Canary is part of Zscaler); the same day's probe read it as relevant. No further change.