Censys
Censys is a cybersecurity company that offers Internet-wide continuous visibility and real-time risk assessment. Censys provides data-driven security used by researchers, corporations, and governments to find and analyze every device connected to the Internet. Founded by the creators of ZMap, Censys gives organizations the visibility they need to fight threats by continuously analyzing real-time Internet data.
Integrations
Censys
With this Playbook App, you can retrieve multiple types of enrichment information for IOCs. Additionally, it allows you to craft custom Censys searches to retrieve result sets based on factors such as software versions being run, services running, open ports, and more. You can even use it to monitor your own potentially open and vulnerable infrastructure, among numerous other possible use cases. The following actions are available with this Playbook App:
- DNS Lookup
- Reverse DNS Lookup
- Search Censys
- Get Enrichment
- Parse Results
This app can be found in the ThreatConnect App Catalog under the name: Censys
Built By ThreatConnect
Censys with Polarity
The Polarity - Censys integration searches for IPs in Censys Attack Surface Management solution. Enabling users to quickly get a complete picture of the attack surface an IP has gone through.
Examples
Censys Data Overview
- Summary Information: For the Censys summary tags, users can quickly determine where an IP is originating from, what ports are open and who owns the IP address.
- Geolocation: Geolocation information of the IP address to include: city, country and the lat/long.
- ASN Details: Quickly understand that ASN information of the IP address, to include information on the prefix of the IP, the ASN Number and the owner.
- OS Details: Operating System details of the IP Address to include: CPE, vendor and product.
- Services: What ports and services are running that are associated with the IP Address.
Related Resources
Built By Polarity