My DokuWiki

This is an old revision of the document!

You can find risk scores in various places in Kaduu. These are based on different criteria depending on the topic. For example, the risk scores for leaks are assigned based on the "tags". A tag is a description of what can be found in the leak. Examples of tags:

• PII
• Address
• ccount
• Hash
• Password
• Private
• Business
• Credit card
• Phone
• etc

For example, a leak that only contains the address of a user has a different risk than a leak that also contains a password or a credit card.

However, we also use risk scores which are determined more precisely. Examples:

• Infrastructure: If a server has unusual ports, is recognizable as a test or staging server or has CVE vulnerabilities.
• Domains: If the domain fulfills certain criteria (reported in Phishtank, suspicious URL, automatic download, reported in Virustotal, etc.). See risk analysis in https://urlscan.kaduu.io/