enrichers.mdx 2.2 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253
  1. ---
  2. title: "Enrichers"
  3. description: "Quick start guide to using Enrichers for your OSINT investigations."
  4. category: "Getting started"
  5. order: 4
  6. author: "Flowsint Team"
  7. tags: ["tutorial", "getting-started", "enrichers"]
  8. version: "1.2.8"
  9. last_updated_at: "2026-05-15"
  10. ---
  11. ### What is an Enricher?
  12. An enricher is an operation that, starting from an input element A (source entity), produces one or more elements B (target entities) by applying a search or correlation method called a pivot.
  13. Example:
  14. ```bash
  15. A = my.domain.com (domain name)
  16. p = “DNS resolution” (pivot)
  17. B = 12.23.34.45 (IP address)
  18. ```
  19. That said, a pivot is the method or technical process used to derive B from A. The pivot defines how the transformation obtains its result (e.g., DNS resolution, WHOIS lookup, API query, etc.).
  20. Example:
  21. ```bash
  22. DNS Resolution → domain → IP
  23. WHOIS Lookup → IP → owner
  24. Reverse Image Search → image → web pages containing that image
  25. ```
  26. Flowsint comes with a bunch of prebuilt enrichers, divided into multiple categories. Those enrichers can use standard pivots that your machine can support by default (DNS resolution, WHOIS request, etc.) and some other that depend on external tools.
  27. Those can be :
  28. - Native : DNS resolutions, Whois, etc.
  29. - Docker tools: [subfinder](https://github.com/projectdiscovery/subfinder), [asnmap](https://github.com/projectdiscovery/asnmap), etc.
  30. - Python tools: [sherlock](https://github.com/sherlock-project/sherlock), [maigret](https://github.com/soxoj/maigret), [reconurge/recontrack](https://github.com/reconurge/recontrack), [reconurge/reconcrawl](https://github.com/reconurge/reconcrawl), [reconurge/reconspread](https://github.com/reconurge/reconspread), etc.
  31. - External services (paid or free): [shodan](https://www.shodan.io/), [whoxy](https://www.whoxy.com/), [whoisxmlapi](https://www.whoisxmlapi.com), etc.
  32. ### Making your own enrichers
  33. Creating your own enrichers invloves multiple steps, but is not that trivial.
  34. If you plan on writting your own enrichers and think they could help the community, please contribute by making a pull request !
  35. Please refer to [this section](/docs/developers/managing-enrichers) to start building your own enrichers.