Automatic tagging

Holidays are over, and development has started again :-)

We start this week with automatic tagging of hosts that are recognized as Mailserver or Nameserver. The tags will appear in the list of user tags you already have. Automatic tags are blue and user tags are purple, so you can easily spot the difference.

Coming weeks will see the appearance of more automatic tags. Think of tags like "VPN", "Remote login", "Admin panel" and "Shared hosting". If you have any specific tags you'd like to see please let us know.

Infrastructure upgraded

In the last two weeks the core infrastructure has been rebuild and now runs on bigger servers. Not much to tell other than that really. Hope you all enjoy better performance and more stability :-)

Detecting trackers and unsollicited cookies

We have now started tracking the trackers. Detection for Google Analytics IDs and Meta (facebook) Pixel IDs has just moved to production and. In time others will follow. You can get a nice overview of all your trackers with these queries:

index=websites by google_analytics_id
index=websites by met_pixel_id

Also new is that we now track which websites set a cookie on the initial load. This is useful for anyone in Europe since the cookie law requires websites to ask users for permission before placing a cookie. European users should make a custom report with this query:

index=websites http_cookie_on_load=1 OR https_cookie_on_load=1 
| table url ip http_cookie_on_load  https_cookie_on_load last_seen

Another new check is if a website uses HTPP Basic Authentication. Check your websites with:

index=websites http_basic_authentication=1 
OR https_basic_authentication=1 

Some of you might have noticed that the preferred search syntax for ShadowTrackr queries has slowly been moving from Elastic Search style to Splunk style. Since this week the autocomplete in the search bar by default suggests Splunk style queries first.