OPSEC Intelligence#
InfraGuard monitors for signals that your infrastructure has been identified by defenders or security vendors. These systems run in the background, generate alerts through the plugin pipeline, and can trigger automated responses like cooldown or infrastructure rotation.
| Page | Description |
|---|---|
| Burn Detection | Automated compromise detection via vendor spike analysis, CT log monitoring, and reputation feeds |
| Burn Confidence Scoring | Weighted multi-signal scoring engine that rates burn likelihood 0-100 |
| Canary Tokens | Invisible tracking elements injected into decoy pages to detect investigation |
| Passive DNS Monitoring | CIRCL PDNS polling to detect analyst reconnaissance and zone takedowns |