OSINT Data Collection & Aggregation Tools 2

Question 1

Which Maltego transform type is used to discover email addresses associated with a domain?

Accepted Answer

Domain to Email Address

Answer

Maltego's 'Domain to Email Address' transform queries OSINT sources to enumerate emails linked to a target domain.

Question 2

What does the tool 'theHarvester' primarily collect during passive reconnaissance?

Accepted Answer

Emails, subdomains, IPs, and hostnames from public sources

Answer

theHarvester aggregates emails, subdomains, IPs, and hostnames from search engines, PGP servers, and other open sources.

Question 3

In Recon-ng, what is the purpose of a 'module'?

Accepted Answer

A discrete unit that performs a specific reconnaissance task

Answer

Each Recon-ng module performs a specific OSINT task such as querying an API, harvesting contacts, or enumerating hosts.

Question 4

Which protocol does Shodan primarily use to fingerprint internet-connected devices?

Accepted Answer

Banner grabbing over service ports (e.g., HTTP, FTP, SSH)

Answer

Shodan connects to service ports and captures banners to identify device type, software version, and configuration.

Question 5

What is the primary advantage of using SpiderFoot's automated workflows over manual OSINT collection?

Accepted Answer

It chains multiple data sources automatically to build a complete target profile

Answer

SpiderFoot automates chaining across 200+ OSINT modules so that output from one module feeds into others, reducing manual pivoting.

(OSINT) Open Source Intelligence Certification Practice Test