CS KAIROS · LEARNING LIBRARY
M02 · Footprinting and Reconnaissance · Safe practice
This module uses offline data, self-created inputs or tabletop scenarios. Follow the steps and check the evidence you produce.
Tabletop exercise: a three-column evidence card
Use only the synthetic DNS records in this lesson; do not query real domains.
- Record both names, 192.0.2.10 and 09:00 under Observation.
- Under Inference, write a possible explanation and one counterexample.
- Under Next check, name the role that must confirm ownership and scope.
Expected result
A counterexample is different customers sharing a CDN or reverse-proxy address. The next action is scope verification, not an immediate scan.
Check your work
What evidence is missing if “may share a front end” becomes “proven to share a backend”?
Finish and clean up
Save the synthetic evidence card. No network or system cleanup is needed.