This guide outlines how to scan for ASNs, IPs, and DNS records associated with a domain and its subdomains, providing actionable insights within the last 30 days (or customizable timeframes for IPs).
Scan for ASNs associated with a domain and subdomains
Silent Push allows brands to identify ASNs linked to A records of a given domain, including its subdomains, over the past 30 days.
Navigate to Attack Surface Mapping > Digital Footprint for Domain > Hosting Infrastructure - ASNs.
Enter a Domain Name.
Click Search.
Scan for IPs associated with a domain and subdomains
Silent Push enables users to search for IP addresses associated with a domain name, with options to filter by timeframes and sort results.
Navigate to Attack Surface Mapping > Digital Footprint for Domain > Hosting Infrastructure - IPs.
(Optional) Enter a Domain Name.
Specify the time frame when the IP address was first seen.
(Optional) Set the time frame when the IP address was last seen.
(Optional) Check Last 24 Hours to show only IPs first observed in the last 24 hours.
(Optional) Specify a Sort Order for the output results.
Click Search.
Explore a Domain's DNS Records
Understanding a domain's public DNS presence is crucial for threat intelligence. Silent Push provides a list of DNS records for a domain within the last 30 days, accessible via an Explore menu for further analysis.
Navigate to Attack Surface Mapping > Latest DNS Records.
Specify a Domain Name.
Click Search.
Additional Actions:
Access the Explore screen to view a list of records (observables) for the domain.
Perform actions such as observable enrichment, saving to a collection or feed, exporting raw data, creating a monitor, or obtaining a risk score.
This integrated approach enhances threat detection and response, making it an essential resource for cybersecurity professionals.