## 4. Sources & Tools Inventory | Category | Tool / Platform | URL / Command | Notes | |----------|----------------|----------------|-------| | Domain WHOIS | `whois` (CLI) | `whois example.com` | Check registration dates, registrar, admin contacts. | | DNS | `dig`, `dnsenum` | `dig ANY example.com` | Identify subdomains, MX, TXT records. | | SSL | SSL Labs, `testssl.sh` | `https://www.ssllabs.com/` | TLS version support, certificate chain. | | Passive DNS | PassiveTotal, `dnsdb` | `https://www.passivetotal.org/` | Historical DNS mappings. | | Search Engines | Google Dorks, Bing | `site:example.com filetype:pdf` | Targeted file discovery. | | Social Media | Twint, Netlytic | `twint -u @handle` | Collect tweets without API limits. | | Code Repositories | GitHub Search | `https://github.com/search?q=example.com` | Look for exposed credentials, config files. | | Image/Video | ExifTool, TinEye | `exiftool image.jpg` | Metadata & reverse‑image lookup. | | Geolocation | Google Earth, OpenStreetMap | N/A | Validate physical locations from posts. | | Dark Web | Ahmia, TorLinks | `http://msydqstlz2kzerdg.onion` | Search for leaked data (legal review required). |

## 7. Recommendations (Prioritized) 1. **Immediate Actions (0‑7 days)** - Rotate all exposed secrets (API keys, tokens). - Secure admin interfaces (auth, MFA, IP restrictions). - Reset passwords for compromised accounts; enforce 2FA. 2. **Short‑Term (7‑30 days)** - Implement a **DMARC** policy and monitor email spoofing. - Conduct a **code‑review audit** for all public repositories. - Deploy a **web‑application firewall (WAF)** for public services. 3. **Mid‑Term (30‑90 days)** - Harden DNS (DNSSEC, registrar lock‑up). - Establish a continuous **OSINT monitoring** pipeline (e.g., SpiderFoot automation). - Provide security awareness training focused on phishing. 4. **Long‑Term (90 + days)** - Adopt a formal **vulnerability management** program. - Periodic **penetration testing** and **red‑team** exercises. - Review and update **incident response** playbooks.

*--- End of Report ---*

### Appendix C – Reference List 1. **OSINT Framework** – https://osintframework.com/ 2. **MITRE ATT&CK** – https://attack.mitre.org/ 3. **NIST SP 800‑115** – Technical Guide to Information Security Testing and Assessment.

---