Use Cases - ASNSPY

Continuous Security Monitoring

Automate daily scans with diff mode for immediate change detection

Security teams automate ASNSPY scans via cron to run nightly. The --diff LATEST flag compares against the previous scan, immediately identifying:

New Assets: Shadow IT and unauthorized systems
Open Ports: Services exposed since last scan
New Vulnerabilities: CVEs in existing infrastructure
Certificate Changes: Approaching expiry or misconfigurations

                        # Daily 2 AM cron job

0 2 * * * /usr/local/bin/asnspy.sh AS15169 --profile security --yes \

  --database --diff LATEST \

  --webhook https://hooks.slack.com/YOUR/WEBHOOK \

  --siem splunk --siem-host splunk.corp.com:8088

Result: Teams discover security issues in hours instead of weeks, with webhook alerts for critical findings and complete audit trails in SIEM/database.

M&A Security Due Diligence

Complete security assessment in hours, not weeks

During acquisition evaluations, companies need rapid security posture analysis of target networks. ASNSPY provides comprehensive assessment in a single command:

                        ./asnspy.sh AS64512 --profile deep --yes \

  --port-scan --leak-scan --http-security \

  --tls --version-detect --cve \

  --cloud-detect --ct --json --database

Assessment Deliverables:

Complete asset inventory across all IP ranges
CVE vulnerabilities with CRITICAL/HIGH priorities
Exposed credentials and configuration files
Certificate hygiene and TLS configurations
Cloud infrastructure and third-party dependencies

Time Savings: 80% faster than manual penetration testing, enabling accelerated deal timelines with data-driven risk assessment.

Rapid Incident Response

Map entire attack surface during active incidents

During security incidents, responders need immediate visibility. ASNSPY provides complete network reconnaissance in minutes:

Phase 1: Quick Scan (5 minutes)

./asnspy.sh AS13335 --profile quick --yes

Immediate answers: How many live hosts? What services exposed? Which systems are production?

Phase 2: Full Attack Surface (15-30 min)

                            ./asnspy.sh AS13335 --profile deep --yes \

  --trace --trace-mode all --port-scan --tls

Complete picture: Network topology, lateral movement paths, all open services, suspicious configurations.

Integration: Real-time SIEM streaming provides SOC visibility, webhook alerts notify incident commander, database storage creates forensic audit trail.

Compliance & Audit

Automated evidence collection for PCI DSS, SOC 2, ISO 27001

ASNSPY provides automated compliance evidence for multiple frameworks:

PCI DSS Requirements

Req 2.2: Configuration standards via leak detection
Req 6.2: Vulnerability management via CVE correlation
Req 11.2: Quarterly external scans with database trails

SOC 2 Controls

CC6.1: Logical access - document all public services
CC6.6: Vulnerability management - continuous monitoring
CC7.2: Change management - diff mode provides change log

Audit-Ready Reports: Asset inventory, vulnerability register, certificate tracking, scan history‚¬"all timestamped and stored in database for year-round compliance readiness.

Real-World Use Cases