Kategori: Asset and Attack Surface
Certificate Transparency Logs: Finding Assets You Forgot
How to mine Certificate Transparency logs for forgotten subdomains and shadow IT, cut through wildcard and renewal noise, and turn matches into…
Passive DNS: Mapping the Subdomains Nobody Documented
How passive DNS subdomain discovery works, why it never touches the target, and the validation criteria that keep stale records out of…
M&A Security: Inheriting an Attack Surface You Never Mapped
What a merger acquisition attack surface review finds, the day-1 domain and IP ownership checks, inventory merge fixes, and segmentation before integration.
Forgotten Domains: Auditing a Sprawling Domain Portfolio
Learn how domain portfolios sprawl, how to inventory every registration, why expired domains enable phishing and mail spoofing, and how to govern…
CMDB Drift: Why Your Asset Records Go Stale in Weeks
CMDB drift explained: why asset records diverge from reality within weeks, how to measure it with a three-source intersection ratio, and how…
Unknown Unknowns: The Assets Your Inventory Never Listed
A practical framework for finding unknown assets: the discovery matrix, where they come from, a 48 hour triage playbook, and the metric…
Orphaned Assets: What Happens When No One Owns a Server
Why servers lose their owners, how orphaned assets decay into breach points, and the DNS, billing, code and network techniques to reclaim…
Certificate Inventory: Finding Every TLS Certificate You Own
Build an ssl certificate inventory that catches orphaned domains, wildcard exposure, and short-lived certs before they turn into unmanaged assets.
Shadow IT: How Unsanctioned Systems Reach Production
Shadow IT security risk comes from microsites, demo environments and personal-card SaaS buys. How to find these assets, decide their fate, and…
Subdomain Takeover: How Dangling DNS Records Get Hijacked
How dangling CNAME, NS, MX and TXT records lead to subdomain takeover, the detection signals to check, and the correct cleanup order…