Investigating Infrastructure Links with Passive DNS and Whois Data

Investigating Infrastructure Links with Passive DNS and Whois Data – Citizen Evidence Lab – Amnesty International

Investigating Infrastructure Links with Passive DNS and Whois Data – Citizen Evidence Lab – Amnesty International

Abstract view of passive vs active DNS measurement (adapted from [46])

Cyber-threat infrastructure schema.

Back-to-the-Future Whois: An IP Address Attribution Service for Working with Historic Datasets

Investigating Digital Threats: Digital Infrastructure – Global Investigative Journalism Network

Phishing Attacks Part 2: Investigating Phishing Domains - Maltego

Investigating Digital Threats: Digital Infrastructure – Global Investigative Journalism Network

Passive DNS And The Halting Problem - ppt download

Valuable Datasets to Analyze Network Infrastructure, Part 3 - DomainTools

Addressing the challenges of modern DNS a comprehensive tutorial - ScienceDirect