Going From A Domain Name to IP Address in DNSDB: Some "Pro Tips" To Keep In Mind
ID: 3df1ad1f-c08c-5150-91a2-1e36da8f7552
STIX ID: report--3df1ad1f-c08c-5150-91a2-1e36da8f7552
Feed Name: DomainTools
This guide explains how to use Farsight DNSDB (and the dnsdbq client) to map domain names to IPs, including how DNSDB returns different record types by default, how to time-fence historical results, how to chase CNAME chains to obtain final A/AAAA records, how single DNS answers can contain multiple IPs, and how large numbers of unique responses can be derived from relatively small IP pools; it is an operational/tutorial piece rather than a security incident report.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
