cross-wave-delta-analysis

Recon delta analysis compares structured findings across multiple temporal scan waves to identify security regressions and new attack surfaces. You need it when tracking target infrastructure changes and vulnerability persistence over time during offensive security assessments.

To compare recon datasets for new vulnerabilities, provide the paths to your old and new standardized markdown recon output directories. The tool generates a comparative delta report highlighting infrastructure changes, regressions, and newly exposed ports or subdomains.

Yes, Python 3 is required to run cross-wave security drift detection. You also need access to standardized markdown-based recon output files from your previous scanning waves to perform the longitudinal infrastructure analysis.

Yes, you can track newly exposed subdomains and ports between scan waves. The surface expansion tracking feature detects new services and infrastructure changes that appeared since your last scan, highlighting them in the delta report.

The best way to identify security regressions is comparing temporal recon waves to check if previously open vulnerabilities have been hardened or blocked. This longitudinal analysis tracks persistence and flags when security posture weakens over time.

Recon output files must be in a standardized markdown format for delta comparison. The analysis scripts parse these markdown files from your provided directories to detect security drifts and generate comparative reports.