Automated Hunting

This post introduces Censeye, an automated pivoting/reporting tool for Censys scan data that extracts structured fields (TLS certs, service banners, fingerprints, HTML titles, etc.) to surface suspicious infrastructure; the author demonstrates finding Cobalt Strike beacons, a Stealc info‑stealer C2, reused certificates (MoonBounce example), and other IoCs while discussing workflow, caching, query-cost warnings, and depth-based crawling.