Cyber Threat Intelligence - Determining the Attack Surface

[fhe-SI]

Hi,

Question "How many subdomains does "blueteam.training" have?" from class Cyber Threat Intelligence - Determining the Attack Surface expect an answer of "0" based on the results of SecurityTrails (https://securitytrails.com/list/apex_domain/blueteam.training), but securitytrails does indicate existence of one subdomain (www.blueteam.training).

[malik-suhail]

Hi,

Question "How many subdomains does "blueteam.training" have?" from class Cyber Threat Intelligence - Determining the Attack Surface expect an answer of "0" based on the results of SecurityTrails (https://securitytrails.com/list/apex_domain/blueteam.training), but securitytrails does indicate existence of one subdomain (www.blueteam.training).

I have not done that section yet but i understand your issue.
Subdomain should be considered 0 because subdomain of blueteam[.]training should be in the form of xxx[.]blueteam[.]training , not blueteam[.]training itself.

[fhe-SI]

Hi,

True. But www.blueteam.training is a subdomain of blueteam.training and is listed as a subdomain in Security Trails.
On a more "DNS" standpoint, you could tell that www is a subdomain of blueteam, which is itself a subdomain of training.