External Attack Surface Discovery

External Internet Discovery:

Unveiling the Digital Depths of the Web

Introduction:
In a world interconnected by the vast expanse of the internet, the ability to uncover, evaluate, and understand online assets is a cornerstone of robust cyber health. Internet Discovery isn't just about knowing what's online; it's about comprehending the intricacies, vulnerabilities, and potentials of the digital assets linked to an organisation.

Understanding Internet Discovery:
At its heart, Internet Discovery entails scanning the digital spectrum to ascertain every online touchpoint linked to a business or individual. This can range from official websites and cloud storage to forgotten blogs and unnoticed third-party affiliations. In essence, it is the process of leaving no stone unturned in the digital domain.

• Why Internet Discovery Matters:
  Asset Mapping: Recognizing and cataloging every online touchpoint ensures comprehensive oversight of digital assets. This process helps mitigate potential risks associated with overlooked or mismanaged assets.
• Vulnerability Assessment: By discovering every aspect of an organisation's digital footprint, vulnerabilities can be identified and rectified before they become threats.
• Mergers & Acquisitions: For businesses in transition, Internet Discovery illuminates the entirety of online assets, ensuring a clear understanding of what is acquired or merged.

Beyond the Surface:
While many perceive the internet as just the surface web, Internet Discovery delves deeper. It ventures into the depths of the deep web and, when required, the dark web. These often overlooked regions of the internet can harbor information and assets unbeknownst to organisations.

Forge Forward with Insight:
In this digital age, being unaware of one's complete online presence isn't an option. Internet Discovery serves as the compass, guiding organisations through the intricate mazes of the online realm.

Our Comprehensive Internet Discovery Process:
Identify:

• OSINT and Online Tools: Through the deployment of Open Source Intelligence (OSINT) and specialized online tools, we meticulously determine your organisation's externally exposed networks, IP ranges, domain names, and subdomains.
• Domain Enumeration: Leveraging tools like DNSTWIST and URLCRAZY, we enumerate domain variations of provided domain names. This ensures awareness of registered domains that might be exploited for phishing attacks against your entity.
• Subdomain Exploration: Utilizing public certificate registration records and OSINT-driven DNS brute-forcing methodologies, we identify any subdomain names affiliated with your organisation.
• IP Address Mapping: Combining regional internet registry WHOIS lookups with IP addresses tied to enumerated domain names, we outline IP address ranges linked to your establishment.
  Classify:

Service Analysis:

Once the digital assets are identified, we delve deeper to discern the services operational on the pinpointed IP addresses and domain names.

Vulnerability Assessment: This optional step aids in classifying the potential repercussions posed by any unidentified applications or services. It's not just about finding what's out there; it's about understanding the latent risks they might harbor.

• Report:
  Comprehensive Overview: Post-assessment, we furnish you with an exhaustive report that delineates your externally exposed networks, IP ranges, domain names, and subdomains.
  Potential Attack Avenues: Our report highlights domain names that might be weaponized against your organisation, giving you foresight to preemptively counteract these threats.
  Vulnerability Insight: As an extended service, we offer an in-depth vulnerability report on the detected IP addresses and domain names, presenting a holistic view of your digital health.

Foundation for Risk Assessment: Our report isn't merely an inventory of your online assets. It paves the way for a structured risk evaluation, ensuring you remain proactive in your cyber defence strategy.

Equip yourself with the insights needed to navigate the digital realm securely. Trust in ProCheckUp's expertise to spotlight, analyse, and report on your online presence.