Split passive DNS name lookups

digital4rensics / Malformity

Malformity is a Maltego project based on the Canari framework for malicious binary and infrastructure research.

115 stars 35 forks source link

Split passive DNS name lookups #4

Open krmaxwell opened 11 years ago

krmaxwell commented 11 years ago

Given that they require two different commands and return different data (albeit more frequently on one request type than the other), I suggest that "rdata name" and "rrset" lookups for names be separated into two different transforms.

krmaxwell commented 11 years ago

By way of explanation: currently, "Domain to IP" currently only uses "rdata name" lookups. I suggest we have another separate transform to support "rrset" lookups as these occasionally return interesting results.