<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Agentic Security Field Guide: Threat intel enrichment</title><description>Tools for the task: Threat intel enrichment, with reach and lab verdict.</description><link>https://readbeforerun.ai/</link><item><title>CrowdStrike Falcon MCP Server (reach 3 · beyond declared (1))</title><link>https://readbeforerun.ai/catalog/crowdstrike-falcon-mcp/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/crowdstrike-falcon-mcp/</guid><description>MCP server that connects agents to the CrowdStrike Falcon platform: detections, threat intel, host management and response.</description><pubDate>Sat, 07 Nov 2026 00:00:00 GMT</pubDate></item><item><title>Threat Intel Toolkit (reach ≥2 · not run yet)</title><link>https://readbeforerun.ai/catalog/kevinmhorvath-threat-intel-toolkit/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/kevinmhorvath-threat-intel-toolkit/</guid><description>Claude Code plugin with a subagent and two skills that triage IOCs and CVEs against free threat-intel feeds, without API keys.</description><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Purple AI MCP Server (reach 3 · not run yet)</title><link>https://readbeforerun.ai/catalog/sentinelone-purple-mcp/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/sentinelone-purple-mcp/</guid><description>Read-only MCP server for the SentinelOne Singularity platform: Purple AI, data-lake PowerQuery, alerts, vulnerabilities, misconfigurations and inventory.</description><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate></item></channel></rss>