Changes to RSA Live Feeds

[Anonymous]

IMPORTANT ANNOUNCEMENT: RSA Live Feed Changes

On February 10^th 2014, the following intelligence feeds will be eliminated from RSA Live:

·      Anonymous Proxy Sites

·      APT Domain Intelligence Release 20110818

·      APT IP Intelligence Release 20110818

·      SpamHaus Dbl

·      SpamHaus Pbl

·      SpamHaus Sbl

·      SpamHaus Xbl

·      Symantec Domains

·      Symantec IPs

·      QakBot C2 Domains

·      APT Domains - Generic

·      CoreFlood Botnet Domains

·      Murofet Botnet Activity

·      Bogons

·      Jackal Known Ips

·      Jackal Known Domains

·      Jackal Known Filenames

·      Malware Generic Filenames

·      Malware Known Filenames

·      Amada Domain Blocklist

·      Amada IP Blocklist

·      Amada Proactive Domain Blocklist

·      Remote Control Client Download

·      Remote Control Client Website

·      Security Tools

·      Suspicious Filenames For .cgi

·      Suspicious Filenames For .exe

·      Suspicious Filenames For .pdf

·      Suspicious Filenames For .phf

·      Suspicious Filenames For .rar

·      Suspicious Filenames For .swf

·      Suspicious Filenames For .zip

·      Watchlist Countries

·      Watchlist TLD

·      Bad Destination Organizations

·      Bad Source Organizations

·      3rd Party Mailers

·      Open MyNetwatchman

·      Internet Identity (IID) Bad IPs

·      Internet Identity(IID) Domain Threats

·      Internet Identity(IID) File Threats

·      Proxy Hunter

·      ISEC Exposure Domain Blacklist

·      NetWitness Threat Intelligence for Financial Services powered by MyNetWatchman

·      SenderBase Top 100

·      SenderBase Ip

·      SenderBase Domain

·      MaxMind ASN

·      MaxMind Organization

·      SANS

·      Zeus ASN Tracker

·      Malware Domain File List

·      SpyEye ASN Tracker

Customers who currently subscribe to the feeds that will be eliminated will still have access to the last updated version of the feed through the month of February. On March 1st, 2014 the feeds will be completely removed from RSA Live.

To avoid any subscription errors we urge current subscribers to disable their subscriptions to any of the feeds listed by March 1st.

RSA Security Analytics customers can use the Live module interface to delete feed subscriptions.  RSA NetWitness customers can use the Live Manager thick client to delete feed subscriptions.

The elimination of these feeds is part of an ongoing effort to provide a more focused intelligence offering to our customers with the most timely and relevant content possible. Feeds that are slated to be eliminated have been chosen because they meet one or more of the following criteria:

·      Functional overlap with other existing feeds

·      Lack of timeliness and consistency of updates from the 3^rd party feed

·      Lack of quality in the 3^rd party feed content

·      Overly restrictive static nature of feed