OSINT Data Collection Tools and Techniques 2

Question 1

Which Shodan filter syntax is used to search for devices running a specific operating system?

Accepted Answer

os:"Windows"

Answer

Shodan uses the 'os:' filter to search for devices running a specific operating system.

Question 2

What does the acronym WHOIS stand for in the context of domain intelligence gathering?

Accepted Answer

It is not an acronym — it is a query protocol asking 'who is' responsible for a domain

Answer

WHOIS is a query-and-response protocol whose name literally means 'who is' responsible for the queried resource.

Question 3

An OSINT analyst wants to enumerate subdomains of a target without sending any packets to the target. Which technique best fits this goal?

Accepted Answer

Passive DNS replication via third-party databases

Answer

Passive DNS replication queries historical DNS databases held by third parties, generating no traffic toward the target.

Question 4

Which Python library is most commonly used for scraping and parsing HTML content in OSINT scripts?

Accepted Answer

BeautifulSoup

Answer

BeautifulSoup is the standard Python library for parsing HTML and XML documents in web-scraping workflows.

Question 5

In Maltego, what is a 'Transform'?

Accepted Answer

An automated query that converts one entity type into related entities

Answer

A Transform in Maltego is an automated query that takes an input entity and returns related entities from external data sources.

(OSINT) Open Source Intelligence Certification Practice Test