<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
        <title>Coeus — the archive</title>
        <link>https://coeus.tools/blog</link>
        <description>Writing from the Coeus maintainers on entity triage, source packs, threat-intel APIs and the privacy design.</description>
        <lastBuildDate>Mon, 07 Sep 2026 00:00:00 GMT</lastBuildDate>
        <docs>https://validator.w3.org/feed/docs/rss2.html</docs>
        <generator>Coeus</generator>
        <language>en-GB</language>
        <image>
            <title>Coeus — the archive</title>
            <url>https://coeus.tools/icon-512.png</url>
            <link>https://coeus.tools/blog</link>
        </image>
        <copyright>© 2026 Coeus. All rights reserved.</copyright>
        <atom:link href="https://coeus.tools/blog/feed.xml" rel="self" type="application/rss+xml"/>
        <item>
            <title><![CDATA[Coeus 2.0: one build for home and work]]></title>
            <link>https://coeus.tools/blog/coeus-2-0-one-build-for-home-and-work</link>
            <guid isPermaLink="false">https://coeus.tools/blog/coeus-2-0-one-build-for-home-and-work</guid>
            <pubDate>Mon, 07 Sep 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[Why the personal build and the company build merged into one, what source packs changed, and what to expect when you upgrade from 1.x.]]></description>
            <author>Coeus</author>
            <category>release</category>
            <category>packs</category>
            <enclosure url="https://coeus.tools/blog/coeus-2-0-one-build-for-home-and-work.svg" length="0" type="image/svg"/>
        </item>
        <item>
            <title><![CDATA[Where your API keys live]]></title>
            <link>https://coeus.tools/blog/where-your-api-keys-live</link>
            <guid isPermaLink="false">https://coeus.tools/blog/where-your-api-keys-live</guid>
            <pubDate>Sat, 05 Sep 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[Local storage, never sync; site access without a proxy; the queue, quotas, private ranges, and exactly what the account can and cannot see.]]></description>
            <author>Coeus</author>
            <category>privacy</category>
            <category>api-keys</category>
            <enclosure url="https://coeus.tools/blog/where-your-api-keys-live.svg" length="0" type="image/svg"/>
        </item>
        <item>
            <title><![CDATA[Ten free threat-intel APIs compared]]></title>
            <link>https://coeus.tools/blog/ten-free-threat-intel-apis-compared</link>
            <guid isPermaLink="false">https://coeus.tools/blog/ten-free-threat-intel-apis-compared</guid>
            <pubDate>Thu, 03 Sep 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[Quotas, keyless modes and what each source is genuinely good at — with the date every figure was checked and the limits stated honestly.]]></description>
            <author>Coeus</author>
            <category>api-keys</category>
            <category>osint</category>
            <enclosure url="https://coeus.tools/blog/ten-free-threat-intel-apis-compared.svg" length="0" type="image/svg"/>
        </item>
        <item>
            <title><![CDATA[From extension to account]]></title>
            <link>https://coeus.tools/blog/from-extension-to-workspace</link>
            <guid isPermaLink="false">https://coeus.tools/blog/from-extension-to-workspace</guid>
            <pubDate>Tue, 01 Sep 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[A dated account-and-cases design from before Coeus adopted its current tools-first direction.]]></description>
            <author>Coeus</author>
            <category>account</category>
            <category>cases</category>
            <enclosure url="https://coeus.tools/blog/from-extension-to-workspace.svg" length="0" type="image/svg"/>
        </item>
        <item>
            <title><![CDATA[Highlighting entities on any page without a content script]]></title>
            <link>https://coeus.tools/blog/highlighting-indicators-on-any-page-without-a-content-script</link>
            <guid isPermaLink="false">https://coeus.tools/blog/highlighting-indicators-on-any-page-without-a-content-script</guid>
            <pubDate>Wed, 26 Aug 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[The original activeTab design, chrome.scripting, the CSS Custom Highlight API and a shadow-DOM chip — plus what changed before 2.0 shipped.]]></description>
            <author>Coeus</author>
            <category>engineering</category>
            <category>privacy</category>
            <enclosure url="https://coeus.tools/blog/highlighting-indicators-on-any-page-without-a-content-script.svg" length="0" type="image/svg"/>
        </item>
        <item>
            <title><![CDATA[Build a source pack others can subscribe to]]></title>
            <link>https://coeus.tools/blog/build-a-source-pack-your-whole-soc-can-subscribe-to</link>
            <guid isPermaLink="false">https://coeus.tools/blog/build-a-source-pack-your-whole-soc-can-subscribe-to</guid>
            <pubDate>Thu, 20 Aug 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[From a hand-modified extension to a hosted JSON file: writing the sources, choosing placeholders, keeping internal hosts local, serving it with an ETag, and rotating it safely.]]></description>
            <author>Coeus</author>
            <category>packs</category>
            <category>sources</category>
            <enclosure url="https://coeus.tools/blog/build-a-source-pack-your-whole-soc-can-subscribe-to.svg" length="0" type="image/svg"/>
        </item>
        <item>
            <title><![CDATA[Triage faster with tab groups]]></title>
            <link>https://coeus.tools/blog/triage-faster-with-tab-groups</link>
            <guid isPermaLink="false">https://coeus.tools/blog/triage-faster-with-tab-groups</guid>
            <pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[The prerelease tab-group routine: one colour per entity type, the omnibox with a source filter, the reuse rule, and the side panel alongside instead of another tab.]]></description>
            <author>Coeus</author>
            <category>workflow</category>
            <category>triage</category>
            <enclosure url="https://coeus.tools/blog/triage-faster-with-tab-groups.svg" length="0" type="image/svg"/>
        </item>
        <item>
            <title><![CDATA[Defanging, refanging, and why hxxp still matters]]></title>
            <link>https://coeus.tools/blog/defanging-refanging-and-why-hxxp-still-matters</link>
            <guid isPermaLink="false">https://coeus.tools/blog/defanging-refanging-and-why-hxxp-still-matters</guid>
            <pubDate>Mon, 10 Aug 2026 00:00:00 GMT</pubDate>
            <description><![CDATA[Where hxxp came from, exactly which defanged forms Coeus recognises, and the conventions worth using when you paste an entity into a ticket.]]></description>
            <author>Coeus</author>
            <category>entities</category>
            <category>workflow</category>
            <enclosure url="https://coeus.tools/blog/defanging-refanging-and-why-hxxp-still-matters.svg" length="0" type="image/svg"/>
        </item>
    </channel>
</rss>