File 05
Recommended passive core
8 records, read from 6-recommended-passive-core.
| Need | First choice | Secondary/conditional |
|---|---|---|
| entity/domain registration | RDAP + official company/registry records | current DNS under CM1 profile |
| subdomain/certificate history | crt.sh/Cert Spotter + Subfinder passive sources | Amass passive graph |
| historical URLs/pages | Common Crawl + Wayback + Arquivo.pt | gau as adapter |
| technology hints | WappalyzerGo on permitted/cached HTML | BuiltWith free group signal |
| public documents | ordinary permitted discovery + Tika/ExifTool in isolated local worker | FOCA/manual review |
| public code/dependencies | GitHub official search + OSV-Scanner | Gitleaks/detect-secrets with redaction/no verification |
| advisory enrichment | OSV + NVD + CISA KEV + EPSS | GitHub Advisory DB offline mirror |
| cached service context | Censys Free/urlscan search under quota and terms | OTX/GreyNoise context |