Ivre
Supported by community
Infrastructure & Attack Surface Visibility
Overview
IVRE connector enriches network observables with self-hosted reconnaissance data including network scan results, passive DNS, and geolocation.
IVRE is an open-source network reconnaissance framework that makes it easy to build self-hosted, fully controlled alternatives to services such as Shodan, ZoomEye, Censys (wide network scans), GreyNoise (scanners monitoring), and PassiveDNS.
This connector enriches network observables using data from your IVRE instance, creating relationships and adding contextual information from:
- Network scan results (Nmap)
- Passive DNS data
- MaxMind geolocation data