Hello, welcome to the Monday, May 2, 2022 edition of the Sandsenet Storm Center's Stormcast.

My name is Johannes Ulrich.

And then I'm recording from Jacksonville, Florida.

Well, if I work with a passive DNS actually a great resource,

but often something that may be only available with an expensive

commercial service.

The idea of passive DNS is that you essentially do reverse resolution, but not just by

looking up pointer records, but instead looking up any host names that were solved to a particular

IP address in the past. Now, like I said, these solutions are available commercially, but

any cheap and easy ways to do it? Well, a rob is going over some ideas, like, for example,

looking at other host names in TLS certificates.

That's sort of one actually a quite helpful way of doing this, as well as some free APIs

that you may be able to leverage. Use the Sands.org website as an example, so you can kind of

see what other domains he was able here to discover

that are related to Sanss and resolve to the same IP addresses.

It looks like VPN-like solutions built into operating systems is becoming a more and more common

feature. Apple, of course,

started doing its version of this feature with the most recent releases of iOS. Now, Microsoft

is also experimenting with something they call Microsoft Edge Secure Network. These are not attempting to be sort of complete virtual private

networks, but essentially something that's close enough. It provides some privacy, but also is

simple enough where it can implement it for free. Microsoft does limit the data volume to one gigabyte per month. This is currently a preview

feature with Microsoft. So of course, some of the details of this feature, like for example,

...