Skip to main content
Answer

Find assets that were discovered through certificates

  • September 6, 2024
  • 2 replies
  • 45 views

Has anyone found a way to filter, using queries or API, for assets that were found through Certificates?

The only point I see in common is the source as “Censys Scan” but I need to narrow it down further.

Best answer by MattK_Censys

Hi there! I ran this by the team. They suggested using the discoveryTrail parameter with the ASM hosts API (v1/assets/hosts?discoveryTrail=true) to identify hosts that were discovered by certificates. An important thing to note is that a host may discovered via multiple paths but only one path will be shown in discoveryTrail.

The results included in the protocols array for a host will also list any certs on a host, so you could then build a script to search through protocols[].certificates[].sha256 on results.

I hope this helps - let me know.

2 replies

MattK_Censys
Forum|alt.badge.img+2
  • Censys Community Manager
  • Answer
  • September 6, 2024

Hi there! I ran this by the team. They suggested using the discoveryTrail parameter with the ASM hosts API (v1/assets/hosts?discoveryTrail=true) to identify hosts that were discovered by certificates. An important thing to note is that a host may discovered via multiple paths but only one path will be shown in discoveryTrail.

The results included in the protocols array for a host will also list any certs on a host, so you could then build a script to search through protocols[].certificates[].sha256 on results.

I hope this helps - let me know.


  • Author
  • New Participant
  • September 9, 2024

Thank you! That does the trick!