penafieljlm / inquisitor

Opinionated organisation-centric OSINT footprinting inspired from recon-ng and Maltego
165 stars 56 forks source link

Implement "rule" feature for asset type classification #12

Open penafieljlm opened 7 years ago

penafieljlm commented 7 years ago

At the moment, we're relying on the classification tags of assets and their parents in order to determine their ownership status. There's also that other feature suggestion which says that we should be able to classify assets based on specific criteria: https://github.com/penafieljlm/inquisitor/issues/4

However, that sort of approach can only apply to the asset that exist in the database at the moment of classification (e.g. "reject all hosts under fb.com" that are CURRENTLY in the database). It doesn't apply to future assets that might be placed onto the database later on.

In order to resolve the problem indicated above, we should add a "rule" feature to inquisitor (e.g. "all hosts under under fb.com are to be classified as rejected"). Or maybe we can go for a "cascade rejection classification to children" flag instead.