Q380 · Host correlate 12

← Question library

Preserved graph release · 0.20260206e

Did timeline correlation for endpoint execution and persistence activity in message delivery paths reveal synchronized cross-domain activity?

Question ID

Q380

Category

Host

Archetype

correlate

Declared entry point

No

The wording and classification above are preserved from this release. It does not contain assessment criteria, applicability rules, investigation-specific context, or evidence for this question. Those must not be inferred from the graph alone.

Recorded outgoing routes

• yes
  Q404 · Did identity authentication and privilege activity in privileged access events align with a repeatable adversary objective or technique pattern?

  Route ID: Q380-yes-Q404

• no
  Q536 · Was the investigation hypothesis for application request and session activity in transport metadata resolved with sufficient objective evidence?

  Route ID: Q380-no-Q536

• unknown
  Q511 · Did endpoint execution and persistence activity in execution lineage create measurable confidentiality, integrity, or availability impact?

  Route ID: Q380-unknown-Q511

These links show the graph's published routing. Following a link does not record an assessment or authorize an action.

Cite this exact question

Include the question ID, graph version, and source digest so that later revisions cannot silently change the reference.

TENSOR Framework, graph 0.20260206e, question Q380: “Did timeline correlation for endpoint execution and persistence activity in message delivery paths reveal synchronized cross-domain activity?” https://tensor-standards.pages.dev/questions/0.20260206e/Q380/

Source SHA-256

dfc3f1a965c01b6f7ade253e426e69abcbad688fab20d9d00065d71c777c010c

Download the exact graph · Pinned repository source

Using this question in the candidate Core

This preserved entry is not a converted Core 0.1.0-draft.1 definition. A reviewed conversion must supply explicit assessment criteria and parameters, preserve the source identity, and document any change in meaning. See the candidate contract and contribution process.