"Black Box" Testing with the Python Black Box Tool (pbbt)
Monday, March 26, 2018 By Joe St Sauver
Using Farsight's dnsdbq Command Line DNSDB Tool in a Microsoft Windows Environment: The "Windows Subsystem for Linux" Option
Thursday, March 15, 2018 By Joe St Sauver
The "Forgotten Half" of DNSDB: DNSDB's DNSSEC Coverage
Thursday, March 8, 2018 By Dr. Paul Vixie and Joe St Sauver
Real-time Collaboration, Real-time Investigation with Farsight DNSDB and Polarity
Tuesday, February 27, 2018 By Karen Burke
Farsight's DNSDB Time Fencing: A Post-Attack "Time Machine"
Monday, February 12, 2018 By Joe St Sauver
Touched by an IDN: Farsight Security shines a light on the Internet's oft-ignored and undetected security problem
Wednesday, January 17, 2018 By Mike Schiffman
Increase Incident Response Speed and Accuracy with Farsight DNSDB and Demisto Enterprise
Tuesday, January 9, 2018 By Karen Burke
All I Want for Christmas is a New TLD
Wednesday, December 20, 2017 By Ben April
Farsight DNSDB Now Available on Malware Information Sharing Platform (MISP)
Tuesday, December 12, 2017 By Karen Burke
Timeless Gifts for the CISO in your Life
Friday, December 8, 2017 By Daniel Schwalbe
A Quick Overview of the Top Seven DNS Record Types
Friday, December 1, 2017 By Joe St Sauver
The Registration Data Access Program (RDAP), Whois And You
Friday, November 17, 2017 By Joe St Sauver
5 Tips for Threat Hunting with Farsight DNSDB
Wednesday, October 18, 2017 By Ben April
How Many "Parts" (or "Labels") Does A Domain Name Typically Have?
Friday, October 13, 2017 By Joe St Sauver
The Value of a Brand Domain Name — Priceless
Thursday, October 5, 2017 By Karen Burke
Zone Walking (Zone Enumeration via DNSSEC NSEC Records)
Friday, September 1, 2017 By Joe St. Sauver
CAA Records: An Alternative to DANE for Protecting SSL/TLS Certificate Users
Friday, August 25, 2017 By Joe St. Sauver
The Anti-Phishing Working Group (APWG)'s Global Phishing Survey: Farsight's Take On A Terrific Report
Tuesday, July 11, 2017 By Joe St. Sauver, Karen Burke
Visualizing the incidence of IPv4 addresses in Farsight's DNSDB
Wednesday, June 7, 2017 By Ben April
Automatically Going From An Autonomous System Number (ASN), To The Prefixes It Announces, To The Domain Names Seen Using Those IPs: Another Farsight DNSDB API Demo Application and Whitepaper
Wednesday, May 31, 2017 By Joe St. Sauver
New Farsight White Paper Available For Download: Building a Demo GUI Front End for DNSDB API In Scala
Tuesday, May 16, 2017 By Joe St. Sauver
Five Questions with Andrew Lewman
Friday, April 14, 2017 By Andrew Lewman
Performing Regex Searches Against DNSDB MTBL Files
Tuesday, April 11, 2017 By Joe St. Sauver
What is a Bailiwick?
Tuesday, March 21, 2017 By Joe St. Sauver
RECORD TYPE=NULL Records In DNSDB Mtbl Files
Wednesday, March 8, 2017 By Joe St. Sauver
Farsight's Network Message: Loss Tracking Explained
Friday, February 24, 2017 By Mike Schiffman
Creating a Heatmap From SIE Channel 204 Data
Thursday, January 26, 2017 By Joe St. Sauver and Ben April
Geolocating & Mapping IP Address Data From SIE
Monday, January 16, 2017 By Joe St. Sauver
Farsight's DNSDB Plugin for Splunk
Wednesday, December 7, 2016 By Joe St. Sauver
Raw Hex Rdata Queries: An Obscure (But Potentially Quite Useful) Bit Of DNSDB Functionality
Friday, November 25, 2016 By Joe St. Sauver
Making Programmatic DNSDB Queries With libcurl
Friday, November 4, 2016 By Joe St. Sauver
Remote Profiling of go Programs
Friday, October 28, 2016 By Chris Mikkelson
Farsight's Advanced Exchange Access: The Missing Manual
Thursday, October 20, 2016 By Mike Schiffman
Visualizing SIE Channel 204 Rdata
Friday, October 7, 2016 By Joe St. Sauver
Pick a Side, Pick a Site
Wednesday, September 21, 2016 By Farsight Security, Inc
Non-U.S. Universities with .edu Domain Names: They're More Common Than You Might Think
Thursday, August 25, 2016 By Joe St. Sauver
Introduction to Farsight's NOD RPZ
Wednesday, July 6, 2016 By Kelly Molloy
Accessing Darknet Telescope Data via SIE Remote Access (SRA)
Monday, June 13, 2016 By Joe St. Sauver
Spotting A DNS Denial of Service Reflection Attack in SIE Darkspace Telescope Data
Friday, June 3, 2016 By Joe St. Sauver
Smarter JSON Configs in Go
Monday, May 23, 2016 By Chris Mikkelson
IP Hijacking, part 2
Thursday, May 12, 2016 By Dave Hauser
Magical Thinking in Internet Security
Thursday, April 28, 2016 By Dr. Paul Vixie
IP Hijacking, part 1
Thursday, April 21, 2016 By Dave Hauser
Fun With Go Method Routing
Tuesday, April 12, 2016 By Chris Mikkelson
The Magic of SRV Records
Monday, March 28, 2016 By Joe St. Sauver
The Importance of Scale: A Critical Dimension To Keep In Mind When Benchmarking Passive DNS Options
Thursday, March 17, 2016 By Joe St. Sauver
What (Besides NXDOMAINs) Do We See on Farsight Security's DNS Errors Channel?
Friday, February 5, 2016 By Joe St. Sauver
Good Help is Hard to Find
Thursday, January 14, 2016 By Ben April
IPv6 Deployment Over Time As Seen Through Farsight Security, Inc's Passive DNS Data
Thursday, December 10, 2015 By Joe St. Sauver
Hardening Encrypted Communications Against Diffie-Hellman Precomputation Attacks
Wednesday, December 2, 2015 By Travis Hall
Farsight's Real-time DNSDB, Part Two
Wednesday, November 18, 2015 By Eric Ziegast
Farsight's Real-time DNSDB, Part One
Wednesday, October 28, 2015 By Eric Ziegast
JSON Serialization Support in nmsg
Friday, October 16, 2015 By Henry Stern
How Some People Got Started in Security and Anti-Abuse Work: Anybody Remember Usenet?
Friday, October 9, 2015 By Joe St. Sauver
Conficker and a Brief Tutorial on Working With SIE Channel 80 Sinkhole Data
Friday, October 2, 2015 By Joe St. Sauver
Farsight's Advanced Exchange Access Internals: Understanding Accounting
Thursday, September 24, 2015 By Mike Schiffman
Systematically Collecting The Right Sort of Data About Cyber Security Incidents
Thursday, September 17, 2015 By Joe St. Sauver
Finding Web Proxy Auto Discovery Protocol (WPAD)-related Security Exposures Using Farsight Security's NXDOMAINs Channel
Wednesday, September 9, 2015 By Joe St. Sauver
Farsight's Advanced Exchange Access: 1.2.0 Release Notes
Wednesday, September 2, 2015 By Mike Schiffman
Being an Internet Packrat
Wednesday, August 26, 2015 By Eric Ziegast
Introducing NXD
Thursday, August 20, 2015 By Chris Mikkelson
Newly Observed Hostnames
Wednesday, August 12, 2015 By Joe St. Sauver
Introduction to DNS Changes
Tuesday, August 11, 2015 By Henry Stern
Farsight's Advanced Exchange Access: The C Programming API, Part Three
Tuesday, August 11, 2015 By Mike Schiffman
Farsight's Advanced Exchange Access: The C Programming API, Part Two
Friday, August 7, 2015 By Mike Schiffman
Farsight's Advanced Exchange Access: The C Programming API, Part One
Thursday, July 30, 2015 By Mike Schiffman
Optimizing Reputation System Input Data
Friday, July 24, 2015 By Kelly Molloy
Building a Reputation System From Available Data
Wednesday, July 15, 2015 By Kelly Molloy
Introduction to Reputation Systems
Thursday, July 9, 2015 By Kelly Molloy
Threat Intelligence and The DIKW Pyramid
Wednesday, July 1, 2015 By Ben April
Buying More Nines Worth of Protection
Wednesday, June 24, 2015 By Joe St Sauver
Spamtraps: Creating and Seeding
Thursday, June 18, 2015 By Kelly Molloy
Spamtraps: Keeping it Confidential
Wednesday, June 10, 2015 By Kelly Molloy
Demystifying Spamtraps
Wednesday, June 3, 2015 By Kelly Molloy
So What's The Big Deal About New Domains?
Friday, May 29, 2015 By Joe St Sauver
Distributed Firewall Configuration Part 2: Ferm Configuration with Salt
Wednesday, May 20, 2015 By Travis Hall
Distributed Firewall Configuration Part 1: Salt and Pillars
Thursday, May 14, 2015 By Travis Hall
NMSG and JSON encoding
Wednesday, May 6, 2015 By Mike Schiffman
IPv6 Deployment and Finding IPv6 Needles in Internet Haystacks: Passive DNS & IPv6 Address Discovery
Wednesday, April 29, 2015 By Joe St Sauver
Illuminating online infrastructure for counterfeit goods
Thursday, April 23, 2015 By Eric Ziegast
Google Protocol Buffer Deserialization The Hard Way
Friday, April 17, 2015 By Mike Schiffman
NOD and Greylisting
Wednesday, April 8, 2015 By Joe St Sauver, Ph.D.
Internet Nations
Tuesday, March 31, 2015 By Paul Vixie, Ph.D.
Red Canary Announces Farsight Security As Inaugural Technology Partner
Thursday, March 26, 2015 By Karen Burke
Processing Passive DNS With the nmsg C API
Wednesday, March 18, 2015 By Chris Mikkelson
RRset and Rdata Demystified
Wednesday, March 11, 2015 By Joe St Sauver, Ph.D.
Help The Internet -- And Yourself -- By Running a Passive DNS Sensor Node and Contributing Data To The Farsight Security DNS Database (DNSDB)(tm)
Wednesday, March 4, 2015 By Joe St Sauver, Ph.D.
Farsight's Network Message, Volume 5: The Python Programming API
Wednesday, February 25, 2015 By Mike Schiffman
In Memoriam of Ellen Rosintoski
Saturday, February 21, 2015 By Kelly Molloy
Farsight's Network Message, Volume 4: The C Programming API
Wednesday, February 18, 2015 By Mike Schiffman
Network Message, Volume 3: Headers and Encoding
Wednesday, February 11, 2015 By Mike Schiffman
Farsight's Network Message, Volume 2: Introduction to nmsgtool
Wednesday, February 4, 2015 By Mike Schiffman
Farsight's Network Message, Volume 1: Introduction to NMSG
Wednesday, January 28, 2015 By Mike Schiffman
Data Retention In A Post-Breach World
Thursday, January 22, 2015 By Ben April
DNSDB API New Features
Wednesday, January 14, 2015 By Henry Stern
Using Passive DNS to Avoid Collateral Damage During Takedowns and Seizures
Wednesday, January 7, 2015 By Joe St Sauver, Ph.D.
Farsight's Advanced Exchange Access, part 3 of 3
Wednesday, December 17, 2014 By Mike Schiffman
Farsight's Advanced Exchange Access, part 2 of 3
Wednesday, December 10, 2014 By Mike Schiffman
Farsight's Advanced Exchange Access, part 1 of 3
Wednesday, December 3, 2014 By Mike Schiffman
Farsight
Wednesday, November 19, 2014 By Dr. Paul Vixie
Recent posts
- "Black Box" Testing with the Python Black Box Tool (pbbt)
- Using Farsight's dnsdbq Command Line DNSDB Tool in a Microsoft Windows Environment: The "Windows Subsystem for Linux" Option
- The "Forgotten Half" of DNSDB: DNSDB's DNSSEC Coverage
- Real-time Collaboration, Real-time Investigation with Farsight DNSDB and Polarity
- Farsight's DNSDB Time Fencing: A Post-Attack "Time Machine"