Censys Search Release Notes June 2023 - February 2024
This page features release notes for Censys Search from June 2023 through February 2024. For more recent releases, reference this article.
December 2023 through February 2024
Lite-Certificates
Certificates expired for 90 days or more have a slimmed search schema available to improve the performance of searches on the certificates dataset.
Historical Certificate APIs
Two new Historical Certificate APIs are now available to all users. These endpoints allow users to inspect the observations of certificates across our entire collection historical scan data.
- Certificate Observation History: Returns a list of observations containing hosts and their services which ever presented a given certificate fingerprint.
- Host Certificate History: Returns a list of observations containing certificates which were ever presented on a given host.
Solo/Teams SKUs in Search
New self-service Solo and Teams SKUs supported with in-app credit card workflows. Also improved user-onboarding with a new Getting Started page, and created in-app upgrade workflows.
Search Pagination Limits
Introduced pagination limits in the Search platform:
- Community users: 10
- Solo: 25
- Teams: 50
IP WhoIS
Added IP WhoIS information as an enrichment, which enables historical tracking of IP WhoIS information vs only having the current information in the dataset.
Improved UDP Scanning
Implemented experimental technique to increase UDP service coverage.
Expose Pending Removal
A new service event indicates that a service is "pending removal". This information is an indication that the service may no longer be present on the host, but the removal is pending verification.
Q4 Scanning Enhancements
Enhanced scanning:
- 7 New Protocol Scanners
- 25M New Services in the Dataset
- 76 scanners and labels for C2 services
October 20, 2023
Layout changes to the host summary page:
-
Moved the Explore tab on host summary page to far right.
-
Updated the service header to show the service name first, followed by the port number, a slash, and the L4 (transport) protocol. Services remain ordered by port number.
-
Moved service labels directly under the service header in a style matching the search results page.
-
Added certificate details in the TLS subsection such as the names on the certificate.
October 11, 2023
-
Added a new service type to identify services using the KRPC protocol. (
services.service_name: KRPC
)
October 9, 2023
-
Added a new service type to identify services using the DARKGATE protocol. (
services.service_name: DARKGATE
)
October 6, 2023
-
Added a new service type to identify Erlang Port Mapper Daemon. (
services.service_name: EPMD
)
September 29, 2023
-
Added new service types to identify services using the following protocols:
-
MONERO_P2P (
services.service_name: MONERO_P2P
) -
ZEROMQ (
services.service_name: ZEROMQ
) -
OPC_UA (
services.service_name: OPC_UA
)
-
September 27, 2023
-
Changed the response behavior of the bulk certificates lookup API to return records for any provided fingerprints for which records exist in the Censys repository. Unrecognized fingerprints are now ignored instead of returning an error.
September 18, 2023
-
Added a new service type to identify services using the DHCPDISCOVER protocol. (
services.service_name: DHCPDISCOVER
)
September 14, 2023
-
Added a new service type to identify services using the RocketMQ protocol. (
services.service_name: ETHEREUM
)
September 11, 2023
-
Added a new service type to identify services using the RocketMQ protocol. (
services.service_name: ROCKETMQ
)
September 1, 2023
-
Added new labels identifying reported web technologies using the Wappalyzer library to make searching and classifying services easier.
August 26, 2023
-
Changed the internal query analyzer to more predictably return results for searches using wildcards and regular expressions.
Read more about wildcard searches here and regular expressions here.
August 17, 2023
-
Added a new service type to identify services using the TPLINK_KASA protocol.
services.service_name: TPLINK_KASA
August 11, 2023
-
Added a new service type to identify services with a Cobalt Strike Beacon. (
services.service_name: COBALT_STRIKE
)
August 2, 2023
-
Added a new service type to identify services using the DICOM protocol.
View the complete list of 108+ service names that Censys identifies here.
July 7, 2023
-
Added syntactic support for nested fields in the Censys Search Language.
Query syntax to search within a single object within a nested collection is available here.
June 22, 2023
-
Changed the host search index to receive streamed updates live as scan results are processed.
-
Added all certificate record fields to a new field called
services.tls.certificate
for searching all attributes of a certificate presented during a Censys scan of a service.The limited set of certificate fields available under
services.tls.certificates
is still populated and searchable.The host view endpoint on the API and the host table/JSON views in the UI still show the limited set of fields in
services.tls.certificates
-
Added a new field called
services.tls.presented_chain
which is an array of objects representing a certificate’s trust chain presented by a service. -
Truncated superhosts to only "summary" services to remove noise from search results.
Hosts with more than 100 services will only have one service per service name indexed, on the lowest numerical port that it was observed.
-
Added a new top-level field called
service_count
to indicate the total number of services observed on a host.
Comments
0 comments
Please sign in to leave a comment.