Christophe Tafani-Dereeper

Sounds way too common to be a TTP, on second thoughts

Might also be added at the VM level.

Moving to "to implement" considering we now have evidence from https://unit42.paloaltonetworks.com/cloud-lateral-movement-techniques/ it's been exploited in the wild

same issue/question for implementation of #469 in #478

Addressed by #155

@KatTraxler Can you confirm this was sighted as part of a real-world attack? If yes, let's keep it open. Otherwise let's close. Thanks!

Will close it then, unless there's a strong argument that this is being used by attackers/red teamers/pentesters, c.f. https://stratus-red-team.cloud/attack-techniques/philosophy/#emulate-actual-attacker-activity (which is far from perfect, but we try to stick to...

Censys has removed their free tier. You can still create new accounts, but the API credentials remain valid only for 60 days. See https://github.com/christophetd/censys-subdomain-finder/issues/21#issuecomment-1985033364

Amazing! I really think it would make it much easier to be used more widely and make it more popular. The main alternative right now is `dsnap`, which is easier...

If we have a binary it should be relatively trivial adding it to a distroless image as well?