TLS / JA3 Fingerprint: Data Point Intelligence Guide
Encryption hides the payload, not the handshake. The way a client says hello is often enough to name the software...
Encryption hides the payload, not the handshake. The way a client says hello is often enough to name the software...
DNS records are an organisation's architecture diagram, published voluntarily and updated in real time. Most defenders never read their own....
A wireless access point shouts its identifier several times a second, and crowdsourced databases have been listening for years. A...
A MAC address is the closest thing to a serial number that a network interface broadcasts for free. It is...
Individual IPs rotate hourly. The block they come from does not. CIDR is the level at which infrastructure ownership actually...
Organisations defend the domain they advertise and forget the hundred hostnames beneath it. Subdomain enumeration is where the real attack...
The ASN is where infrastructure stops being anonymous. Every packet on the public internet is routed by an organisation that...
A URL is the only artifact that carries the attacker instruction set in plain sight. Parse it properly and it...
An IP address tells you where traffic went, not who sent it. Treat it as a lead on infrastructure, never...
A domain name is the cheapest thing an adversary buys and the most expensive thing for them to keep clean....
Every weapon carries a serial number and a paper trail from a factory to a legal export licence. Trafficking investigation...
Chemical, biological, radiological and nuclear risk is monitored by an unusually open international architecture. The intelligence value is in reading...
A vehicle is a seventeen-character identifier attached to an engine. Decode it properly and you get the plant, the year,...
You do not have one supply chain. You have a tree of dependencies you have never enumerated, and your real...
Ships are legally required to announce themselves. The interesting behaviour is what happens in the minutes after a vessel stops...
Goods leave a paper trail long before they leave the warehouse. Customs declarations, manifests and trade statistics describe physical movement...
An aircraft broadcasts its identity and position to anyone with a twenty-dollar receiver. The intelligence is not in the position;...
Orbits are deterministic and observable. A satellite cannot hide its manoeuvres from anyone willing to do the arithmetic, and much...
Signals intelligence is a state function with a warrant behind it. For everyone else, the discipline still matters, because you...
The spectrum is a public utility with a public map. Licences, allocations and open receiver networks let you characterise the...
Imagery shows you the object. Measurement and signature intelligence tells you what the object is doing, how hot it is...
Every device carries a confession: certification filings, component markings, firmware strings and design choices. Technical intelligence reads that confession to...
A patent is a bargain: an inventor gets a monopoly, and the public gets the working details. That trade makes...
Research output is the earliest public indicator of national and corporate capability. A capability appears in a paper years before...
Litigation is an involuntary disclosure engine. Adversaries in court say, under oath and on the public record, what they will...