Solutions
White papers
"Bang_Question:" A Tutorial Proof-of-Concept Cyber Investigative Framework
Download
The Strategic Value of Passive DNS to Cyber Defenses and Risk Management
Download
Working with the SIE Batch API: A Command Line Client in Ruby, Perl, Python and C
Download
Reducing Third Party Risk Using Passive DNS Data
Download
Passive DNS for Threat Intelligence
Download
Building a Demo Gui Front End For DNSDB in Scala with Swing for the Mac and for Windows PCs
Joe St Sauver, Ph.D.
Download
Checking DNSDB By ASN (ASN --> Prefixes --> Domain Names) Another Demonstration on Scala Project
Joe St Sauver, Ph.D.
DownloadAcademic use cases
Finding the Linchpins of the Dark Web
Zhou Li (IU), Sumayah Alrwais(IU), Yinglian Xie (MSFT), Fang Yu (MSFT), XiaoFeng Weng (IU)
Read moreA Survey on Malicious Domains Detection through DNS Data Analysis
Yury Zhauniarovich (HBKU), Issa Khalil (HBKU), Ting Yu (HBKU), Marc Dacier (Eurecom)
Read moreTechnical Documentation
DNS Database (DNSDB)
Passive DNS
- Passive DNS Introduction
- Passive DNS Sensor - Installation and Configuration
- Passive DNS Sensor FAQ
- Passive DNS Architecture - Robert Edmonds
- Passive DNS Hardening — Robert Edmonds
- Passive DNS: improving security and privacy — Andrew Cormack (JANET)
- The Impact of Passive DNS Collection on End-user Privacy — Jonathan M. Spring, Carly L. Huth
Security Information Exchange (SIE)
- Distributed Network Capture with Shared Analysis — Original NCAP/SIE Paper by Paul Vixie and Jun Murai
- Farsight Security SIE Realtime Channels
- Security Information Exchange (SIE) User Guide
- 24 Hours in the Life of DNS — Presented at RAID 2015 (Kyoto) in poster form
Other information
- Sorted String Tables: mtbl and dnstable — ISC/CAIDA Data Collaboration Workshop
Open Source Software
- DNSDBQ Manual
- https://github.com/TheHive-Project/Cortex - Analyzer for DNSDB
- https://pypi.org/project/dnsdb/ - Python client for Farsight Security's DNSDB API
- https://github.com/farsightsec — Farsight's open source software repository
- https://dl.farsightsecurity.com/dist/ — Download site for Farsight's open source software
- https://github.com/digital4rensics/Malformity — Maltego transform for DNSDB (deprecated)
- https://www.paterva.com/web7/about/hub.php — There are Maltego Transforms for DNSDB in the Paterva Transform Hub
- https://github.com/mcholste/elsa — ELSA has a DNSDB interface (contributed)
- https://github.com/hdm/ruby-mtbl — Ruby mtbl (contributed)
- https://github.com/hdm/inetdata-parsers/tree/master/cmd — Golang mtbl tools (contributed)