TLS / JA3 Fingerprint: Data Point Intelligence Guide
Encryption hides the payload, not the handshake. The way a client says hello is often enough to name the software...
IP Range / CIDR
DNS Record: Data Point Intelligence Guide
DNS records are an organisation's architecture diagram, published voluntarily and updated in real time. Most defenders never read their own....
Wi-Fi BSSID: Data Point Intelligence Guide
A wireless access point shouts its identifier several times a second, and crowdsourced databases have been listening for years. A...
MAC Address: Data Point Intelligence Guide
A MAC address is the closest thing to a serial number that a network interface broadcasts for free. It is...
IP Range / CIDR: Data Point Intelligence Guide
Individual IPs rotate hourly. The block they come from does not. CIDR is the level at which infrastructure ownership actually...
Subdomain: Data Point Intelligence Guide
Organisations defend the domain they advertise and forget the hundred hostnames beneath it. Subdomain enumeration is where the real attack...
ASN: Data Point Intelligence Guide
The ASN is where infrastructure stops being anonymous. Every packet on the public internet is routed by an organisation that...
URL: Data Point Intelligence Guide
A URL is the only artifact that carries the attacker instruction set in plain sight. Parse it properly and it...
IP Address: Data Point Intelligence Guide
An IP address tells you where traffic went, not who sent it. Treat it as a lead on infrastructure, never...
Domain Name: Data Point Intelligence Guide
A domain name is the cheapest thing an adversary buys and the most expensive thing for them to keep clean....
