Skip to main content

Here’s a query if you want to keep your eyes on hosts that we see with any of these newly issued certs on them.Β We’re not seeing any yet.

services: ((tls.certificate.ct.entries.value.added_to_ct_at: _2024-07-19 to now/d]) and (tls.certificate.names: *crowdstrike*) and (not tls.certificate.parsed.subject.organization: Crowdstrike))

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=INCLUDE&q=services%3A+%28%28tls.certificate.ct.entries.value.added_to_ct_at%3A+%5B2024-07-19+to+now%2Fd%5D%29+and+%28tls.certificate.names%3A+*crowdstrike*%29+and+%28not+tls.certificate.parsed.subject.organization%3A+Crowdstrike%29%29

Β 

  • Edit - revised query. Had a syntax error.Β  Now there are hosts to view

Reply