ShadowTrackr

Log in >
RSS feed

Adding custom DKIM selectors

26 February 2024
As the recently added mailservers report shows, most of your DKIM settings are automatically found by our scanner nodes. Some domains use very specific selectors, and these can only be found in email messages and not through scans online. This will result in warnings about a lack of DKIM.

If this is the case for your organization you can now add your custom selectors under Settings->General in the GUI. You can find you selector by looking at the email headers of an email send from your domain (Look for a menu option labelled "view headers" or "view message details"). A DKIM header line will look like this:

DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; 
d=shadowtrackr.com; i=@shadowtrackr.com; q=dns/txt; 
s=my_selector;

As you might have guessed "my_selector" is the DKIM selector in this example. If you add that to the ShadowTrackr Settings your DKIM selectors will be monitored.

New reports available

19 February 2024
There are two new report templates available in the report library: the Mailservers report and European Cookie Law Report. The Mailservers report shows the settings (MX records, SPF, DMARC and DKIM) on all your mailservers. The report contains suggestions to improve your security settings and if any server is blacklisted the report will also show it. With big email providers like Microsoft and Google blocking senders with wrong or missing SPF and DMARC settings, it's definitely worth it to stay on top of this. Problems mean your email is no longer received by a large part of the internet.

The European Cookie Law Report shows which of your websites set a cookie before any user interaction has taken place. This might indicate a violation.

The magic report queries (those starting with a $) can now also be amended with the fields last_seen and tags. So, to make a report of your mailservers over the last month tagged "acme", you use this query:
$mailservers_report AND last_seen>-1m AND tags=acme

New reports module in GUI

05 February 2024
Shortly after queries appeared in ShadowTrackr it was possible to make your own reports with them. These appeared next to the existing, built-in reports and the GUI has been somewhat inconsistent. Some reports could be send, others not. Some results where available as PDF, others not.

With this weeks refactor of the reports module, that is fixed :-) There is also a report library now with reports you can use. You can use them as is, or take them as example and adapt them to your own needs. If you want a specific report that is not there, please let me know. I might be able to make it and add it to the library.
Older posts >

Resources
API
Blog
Documentation
Integrations
Shodan
OpenCTI