Due to SpiderFoot’s iterative nature, a common question we receive from users is about understanding the relationship between the results presented in the user interface, and the target that was originally specified.
There are a few simple ways this can be achieved in both the open source version and HX.
There are two ways to understand the origins of data in the open source version of SpiderFoot.
- Look at the “Source Data Element” column in the web UI. This column tells you the data point analyzed by SpiderFoot to produce the data point you’re looking at. For example, here we can see that from the
smicallefdata point, a BitBucket account was found:
However, this scan was actually for
binarypool.com, so it would be good to know how SpiderFoot got from that to
smicallef. For this we can use the second method: the Visualize button.
- The Visualize button can present scan data in multiple formats. In this case we want to look at the Discovery Path:
We’ll then be presented with the full journey SpiderFoot traveled from our target to the result:
SpiderFoot HX provides multiple ways to identify the source data of your data elements and traverse the journey of discovery SpiderFoot went through.
- Look a the “Source Data Element” column in the full data view:
- In case that remains unclear, you can click on the small <- and -> arrow buttons on top of the Source Data Element to navigate back and forth through the discovery process.
- To see the discovery path visually, you can click on the blue ‘i’ icon on top of the data element and click the Discovery Path tab:
- To see the discovery path visually for all the data elements currently in view, simply click the purple eye icon in the top right menu of the data set and select Discovery Path: