Verification · Threat modeling · Exposure verification
External asset discovery
Enumerate domains, subdomains and exposed services.
How to build it
- Run amass against the organisation's root domains on a fixed schedule.
- Record every discovered domain and service in an inventory file.
- Diff each run against the previous inventory and flag new assets.
Signals in a repository
- A scheduled workflow that calls amass enum or amass intel.
- An inventory file or config that lists the root domains for discovery.
In practice
No scanned repository runs a tool for this check. The steps above are the only guidance.