.png){kind=logo}
Networksocket
This returns information about network sockets. A network socket is a combination of a host (IP or DNS name) and a port. Note that this doesn't enrich the data at all and is mostly for the purpose of linking.
Certificate
The source gathers information about certificates by parsing them. Note that it doesn't make connections to the servers hosting the certificates, or read certificates from disk. It relies on other sources that come across certificates (e.g. as part of a HTTPS connection), passing them on to this source via a linked item e.g.
DNS
The source makes DNS queries, returning the outcome.
HTTP
The source makes a HTTP HEAD request and returns information about what the server would have returned if a GET request was made. This is useful for ensuring that endpoints actually exist, what their status is, and what certificates they are using. Note that as long as the server returns an error that is valid HTML (like a 500) this source will still return an item.
IP
The source returns details about an IP address. Note that it doesn't make any external requests and mostly exists to provide a node in the graph for other nodes to be linked through.