CT logs come to mind, if you aren't using them already.
DNS queries, if you have access to recursive resolvers.
DNS queries, if you have access to recursive resolvers.
We have a great recursive resolver source but haven't been able to integrate it into the data pipeline yet.
thanks for the note and ideas!