From the course: CompTIA Cybersecurity Analyst (CySA+) (CS0-003) Cert Prep

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

DNS and IP reputation

DNS and IP reputation

From the course: CompTIA Cybersecurity Analyst (CySA+) (CS0-003) Cert Prep

Start my 1-month free trial Buy for my team

DNS and IP reputation

“

- [Presenter] Domain names, URLs and IP addresses are excellent starting points for gathering security information. DNS and URL analysis are particularly useful in malware analysis as they can be used to track the URLs used in malware command and control services. Let's take a look at a few of the utilities that can help you learn more about a remote system. The first thing we'll do is try to learn more about the hosts behind a domain name. The domain name service or DNS translates domain names into IP addresses. Did you know that you can perform DNS lookups manually to find out the IP address associated with a domain name? The dig command is the primary tool for performing domain lookups on Mac and Linux systems. Let's take a look at the dig command in action. Suppose that I'd like to know the IP address for linkedin.com. I can simply type in dig linkedin.com. And then I get some query results. Now, there's a lot of information in here that's giving me details on where the results…

Contents