Skip to main content

Has anyone found a way to filter, using queries or API, for assets that were found through Certificates?

The only point I see in common is the source as “Censys Scan” but I need to narrow it down further.

Hi there! I ran this by the team. They suggested using the discoveryTrail parameter with the ASM hosts API (v1/assets/hosts?discoveryTrail=true) to identify hosts that were discovered by certificates. An important thing to note is that a host may discovered via multiple paths but only one path will be shown in discoveryTrail.

The results included in the protocols array for a host will also list any certs on a host, so you could then build a script to search through protocols[].certificates[].sha256 on results.

I hope this helps - let me know.


Thank you! That does the trick!


Reply