Process and analysis

What is Pivoting?

Using one piece of data to find related data, for example from a domain to its IP, then to other domains on that IP.

Pivoting is moving from one data point to related ones: from a domain to its IP address, from that IP to other domains, from a certificate to sibling sites, from an email address to other accounts. Each step widens the picture of an operator's infrastructure or identity.

Good pivoting is disciplined. Shared hosting, CDNs and common services link unrelated things, so each pivot needs a reason to believe the connection is meaningful, and every step should be recorded.

Where you learn it

See Pivoting in a real investigation

Our missions put you in front of real logs, domains and forums, with these terms underlined where they appear.

Start learning free