System and method of identifying internet-facing assets
A method includes receiving a seed at a computing device. The method further includes identifying, based on first domain name system (DNS) data, first border gateway protocol (BGP) data, first whois data, or a combination thereof, a plurality of first internet-facing assets related to the seed. The method further includes identifying, based on second DNS data, second BGP data, second whois data, or a combination thereof, a plurality of second internet-facing assets related to at least one of the first internet-facing assets. The method further includes generating a graphical user interface (GUI) that includes a list of internet-facing assets related to the seed, where the list includes the plurality of first internet-facing assets and the plurality of second internet-facing assets.
1. A method comprising:
receiving a seed at a computing device, wherein the seed includes an identification of a domain name system (DNS) name server, an identification of a whois contact, an autonomous system number (ASN), a domain name, a host name, an Internet Protocol (IP) address, or a combination thereof;
creating a list of a plurality of internet-facing assets based on the seed;
causing display of a graphical user interface that displays the list of the plurality of internet-facing assets;
creating a sub-list of internet-facing assets from the list of the plurality of internet-facing assets based on user input via the graphical user interface;
periodically scanning each internet-facing asset in the sub-list of internet-facing assets; and
causing display of an alert upon detecting a change in an internet facing asset in the sub-list of internet-facing assets.
2. The method of claim 1 , further comprising:
adding each internet-facing asset in the list of the plurality of internet-facing assets that is not in the sub-list of internet-facing assets to an ignore list.
3. The method of claim 1 , further comprising:
adding each internet-facing asset in the list of the plurality of internet-facing assets that is not in the sub-list of internet-facing assets to an ignore list;
associating the ignore list with the seed; and
wherein each internet-asset in the ignore list is ignored in future searches for internet-facing assets based on the seed.
4. The method of claim 1 , further comprising:
grouping internet-facing assets in the sub-list of internet-facing assets into groups according to one of more grouping criteria.
5. The method of claim 1 , wherein causing display of the alert further comprises:
generating the alert when an internet-facing asset in the sub-list of internet-facing assets begins to satisfy a certain criteria.
6. The method of claim 1 , wherein causing display of the alert further comprises:
generating the alert when an internet-facing asset in the sub-list of internet-facing assets no longer satisfies a certain criteria.
7. The method of claim 1 , wherein the seed is generated by a discovery application executing at the computing device via an iterative feedback process during identification of internet-facing assets related to a previous received seed.
8. The method of claim 1 , wherein the seed is associated with a particular user or business entity.
9. The method of claim 1 , further comprising receiving first information indicating that a DNS name server is associated with a particular internet-facing asset and receiving second information indicating domains for which the DNS name server is an authoritative name server.
10. The method of claim 1 , wherein the seed is associated with information including an e-mail address, a physical address, a contact name, or a combination thereof, and wherein the first data is received from a database responsive to a query based on the information.
11. One or more non-transitory computer-readable storage media, storing one or more sequences of instructions, which when executed by one of more processors cause performance of:
receiving a seed at a computing device, wherein the seed includes an identification of a domain name system (DNS) name server, an identification of a whois contact, an autonomous system number (ASN), a domain name, a host name, an Internet Protocol (IP) address, or a combination thereof;
creating a list of a plurality of internet-facing assets based on the seed;
causing display of a graphical user interface that displays the list of the plurality of internet-facing assets;
creating a sub-list of internet-facing assets from the list of the plurality of internet-facing assets based on user input via the graphical user interface;
periodically scanning each internet-facing asset in the sub-list of internet-facing assets; and
causing display of an alert upon detecting a change in an internet facing asset in the sub-list of internet-facing assets.
12. The one or more non-transitory computer-readable storage media of claim 11 , further comprising:
adding each internet-facing asset in the list of plurality of internet-facing assets that is not in the sub-list of internet-facing assets to an ignore list.
13. The one or more non-transitory computer-readable storage media of claim 11 , further comprising:
adding each internet-facing asset in the list of the plurality of internet-facing assets that is not in the sub-list of internet-facing assets to an ignore list;
associating the ignore list with the seed; and
wherein each internet-asset in the ignore list is ignored in future searches for internet-facing assets based on the seed.
14. The one or more non-transitory computer-readable storage media of claim 11 , further comprising:
grouping internet-facing assets in the sub-list of internet-facing assets into groups according to one or more grouping criteria.
15. The one or more non-transitory computer-readable storage media of claim 11 , wherein causing display of the alert further comprises:
generating the alert when an internet-facing asset in the sub-list of internet-facing assets begins to satisfy a certain criteria.
16. The one or more non-transitory computer-readable storage media of claim 11 wherein causing display of the alert further comprises:
generating the alert when an internet-facing asset in the sub-list of internet-facing assets no longer satisfies a certain criteria.
17. The one or more non-transitory computer-readable storage media of claim 11 , wherein the seed is generated by a discovery application executing at the computing device via an iterative feedback process during identification of internet-facing assets related to a previously received seed.
18. The one or more non-transitory computer-readable storage media of claim 11 , wherein the seed is associate with a particular user or business entity.
19. The one or more non-transitory computer-readable storage media of claim 11 , further comprising receiving first information indicating that a DNS name server is associated with a particular internet-facing asset and receiving second information indicating domains for which a particular internet-facing asset and receiving second information indicating domains for which the DNS name server is an authoritative name server.
20. An apparatus, comprising:
one or more processors; and
a memory storing instructions, which when executed by the one or more processors, cause the one or more processors to:
receiving a seed, wherein the seed includes an identification of a domain name system (DNS) name server, an identification of a whois contact, an autonomous system number (ASN), a domain name, a host name, an Internet Protocol (IP) address, or a combination thereof;
creating a list of a plurality of internet-facing assets based on the seed;
causing display of a graphical user interface that displays the list of the plurality of internet-facing assets;
creating a sub-list of internet-facing assets from the list of the plurality of internet-facing assets based on user input via the graphical user interface;
periodically scanning each internet-facing asset in the sub-list of internet-facing assets; and
causing display of an alert upon detecting a change in an internet facing asset in the sub-list of internet-facing assets.