SolutionsIntelligence
Bespoke collection / RFI
Task Webscout to create exclusive visibility into the covert networks that matter to your mission. Together with trusted partners, we go as deep as the requirement demands, from enumerating a network’s IP addresses to collecting its traffic.
The problem
Some networks matter too much to leave to whatever standard coverage happens to see
When an adversary runs its operations through a particular botnet, ORB network, proxy service or relay chain, general-purpose feeds catch fragments at best.
Tasked collection builds visibility for that network, and for you alone: created on request, with trusted partners where access requires it, and shared with no one else.
How it works
Tasked by you, built for the network
01
Task
You name the network, or the activity, and what you need to know about it.
02
Scope
We assess access and bring in trusted partners where the requirement calls for them.
03
Collect
Dedicated collection, from enumerating the network’s infrastructure to collecting its traffic.
04
Deliver
The intelligence reaches you, and only you, through the Webscout Observability Platform or by secure transfer.
Depth of collection
From enumeration to traffic
01
Enumeration
The IP addresses, nodes and relays that make up the network, kept current as it changes.
02
Monitoring
The network’s infrastructure watched over time: when nodes appear, move and go dark.
03
Traffic collection
Network flows through the network itself, with JA4+ fingerprints and IP context on every connection.
Covert network flows
FAQ
Questions about tasked collection
What is tasked collection?
Collection built for one requirement: you name a covert network, such as a botnet, ORB network, proxy service or relay chain, or an activity, and Webscout creates visibility into it for you alone.
How deep can collection go?
From enumerating the network’s IP addresses, nodes and relays, through monitoring how its infrastructure changes, to collecting the traffic that flows through it, with JA4+ fingerprints and IP context on every connection. Trusted partners join where the requirement calls for them.
What is an RFI in threat intelligence?
A request for information: a specific question a customer puts to an intelligence provider, such as which addresses a botnet uses or who is behind a relay chain. Usually it is answered from data that already exists. Where none does, Webscout builds the collection to answer it.
How is tasked collection different from a threat feed?
A feed delivers what its provider already collects, to every subscriber. Tasked collection starts from your requirement: Webscout scopes it, deploys dedicated collection on the covert network concerned and delivers the results to you alone.
Who sees the results?
Only you. Tasked collection is exclusive to the client who requested it and is delivered through the Webscout Observability Platform or by secure transfer.
Webscout works exclusively with vetted partners in government, defence, intelligence and critical infrastructure.Contact info@webscout.io to learn more.