My DokuWiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Creating Reports in Kaduu ======

Kaduu allows you to export data in different formats or create reports. We differentiate between a custom report you can create in control.l***k.center and a report that can be created in deepweb.l***k.center.


===== Reports in deepweb.l***k.center =====

In deepweb you can choose among different report formats.

{{::new_reporting_dashboard.png?900|}}

IN QUICK I, QUICK II and ADVANCED Report you only have to input your clients domain in the form of example.com (dont use the subdomain like www.example.com) and the reports will be generated automatically. Only the expert report will guide you througha  wizard and will take 2-4 h.

==== Queries used in the different areas ====

In order to generate the report we perform queries to the different API endpoints. Lets consider the company name is Example Bank S.A and the domain is example.com

  * Domain: We query in passive DNS Enumeration all DNS records, that contain the second level domain (query: *example*). You would see a domain like access-**example**.net or **example**s.com as a result. Please note that we do not apply the Levensthein Distance Search (like example~1) which could give you typo-squatted domains like examp**1**e.com.
  * Leak Search: We query the domain "example.com". Please note, that if a company would run a service like https://login.example.services/login.php we would not find it in this search. 
  * Ransomware Search: We use the company name as a search input in expert report "example OR bank" and in the simple reports just the second level domain without the TLD (example).
  * Live Internet search, bucket, URL-Shortener: We use the second level domain (example) as a search input


===== Reports in control.l***k.center =====

In this feature we are using Word’s content control blocks. An admin user can create a regular DOCX file with required formatting and define special “content control blocks” in Word’s developer mode, which will be later used for replacing scalar variables, executing conditions and displaying lists (or tables). 

==== Variables you can use ====

We support the following scalar variables:

  * {date} - current date
  * {day} - current day with leading zero
  * {month} - current month number with leading zero
  * {year} - current year number (YYYY)
  * {author} - user's email (one, who generates the report)
  * {company} - company name
  * {name} - report name
  * {resultCount} - total number of results
  * {lowRiskCount} - number of low risk results
  * {medRiskCount} - number of med risk results
  * {highRiskCount} - number of high risk results

We also support lists for all search results according to the different features:

  * Accounts
  * Distinct leaks
  * Bot records
  * Domains
  * Mail results
  * Mail External results
  * External search results
  * Social results 
  * Ransomware
  * Pastes
  * Posts
  * Certificates


==== Template ====

You can find a report template {{ ::report.zip |here}} 

==== Example ====

First edit (1) your report template and save it locally. The go to (2) Report templates in Kaduu and add it (3). Next create a search in simple mode (4) with the according domain (5). Once all results are collected, you can click the "generate report" button (6). Please note that certain queries take a few minutes.

{{::reportsample.png?800|}}
My DokuWiki

User Tools

Site Tools

Page Tools
