DNINT Techniques#
The tradecraft applied to DNINT sources with the operator’s kit. Each technique is a repeatable procedure that turns raw data into intelligence.
Technique |
Description |
|---|---|
Host discovery |
Identify live hosts in a target range. |
Port scanning |
Enumerate open services. |
Service banner grabbing |
Pull version strings for vulnerability matching. |
OS fingerprinting |
Stack signatures, TTL, window size. |
Subdomain enumeration |
DNS brute, CT logs, scraping, passive sources. |
ASN / prefix analysis |
Identify target ownership at the network layer. |
Passive monitoring |
Watch the target’s externally visible footprint over time. |
Traffic analysis |
Flow records, NetFlow, IPFIX; pattern of life. |
References#
DNINT for the discipline overview.
DNINT Tools for the operator’s kit.
DNINT Sources for the data sources.