building-adversary-infrastructure-tracking-system

Build an automated adversary infrastructure tracking system in Python (dnspython, python-whois, shodan, networkx) that pivots across passive DNS, certificate transparency logs, WHOIS records, and IP enrichment to map threat-actor C2 networks and flag newly registered domains matching known patterns. Use when pivoting from known indicators to discover related C2 infrastructure or maintaining a continuously updated map of a threat actor's network.

Install

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• ask-matt 323,485 ★
  Ask which skill or flow fits your situation. A router over the skills in this repo.
• chief-of-staff 323,485 ★
  Pursue a long-running goal in a single session by co-ordinating subagents.
• claude-handoff 323,485 ★
  Hand the current conversation off to a fresh background agent that picks up the work immediately.
• grill-me 323,485 ★
  A relentless interview to sharpen a plan or design.
• grilling 323,485 ★
  Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thin