While investigating a suspicious domain, you open a graphing utility that helps visualize connections. Which tactic is most likely to uncover email addresses linked to that domain?
Import a manual dictionary to brute force domain subnames for new subhosts
Obtain packet captures from live traffic and parse them for address references
Export raw zone files to an offline table for correlation at a later stage
Run specialized transforms on the domain entity to find addresses associated with that domain using external data sources
In this tool, transforms help pivot from a single artifact (a domain) to a variety of sources that can reveal addresses. Other methods rely on manual correlation or tools that do not automatically discover new relationships. Subdomain enumeration mostly finds additional hostnames, not addresses. Exporting DNS data does not uncover fresh information from external sources. Packet captures require traffic, which is not always available when simply mapping domain connections.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are transforms in the context of domain investigations?
Open an interactive chat with Bash
Why is subdomain enumeration not effective for finding email addresses?
Open an interactive chat with Bash
What types of external data sources can be used to find information about a domain?