Gather facts about a victim's hosts that can inform targeting, including host names, assigned IP addresses, roles, and configuration details such as operating system, software, firmware, and client configuration. Sources can include publicly available datasets and victim-owned web properties, direct observations such as HTTP User-Agent headers, and authorized active scanning. Collected details can be incomplete or stale and should be attributed to their source and observation time.
Variant:
Monitor matching Certificate Transparency entries
powershell
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER