These articles are the conceptual and research layer of GGX Labs documentation. They complement the product references for tools, FORGE, and the Developer API.
Core guides
IP IntelligenceA technical breakdown of IP ownership, ASN mapping, routing context, geolocation inference, and the limits of IP-based intelligence.How IP Tracking WorksHow network services observe source IP addresses, enrich them with infrastructure data, and why an address should not be treated as a precise identity signal.OSINT BasicsA technical overview of Open Source Intelligence, including public data sources, correlation, validation, and responsible use.Network Security FundamentalsA systems-oriented overview of layered network defense, common threat models, monitoring, and zero-trust architecture.How DNS WorksA technical explanation of DNS resolution, recursive lookup, authoritative servers, caching, and the infrastructure behind name resolution.DNS vs IP ResolutionA technical comparison of DNS name resolution and IP routing, and how the two layers interact during a network connection.
Research & analysis
How IP Addresses Can Be Observed and CorrelatedA defensive look at common ways IP addresses become visible through network interactions and how analysts interpret those signals.IP vs VPN AnalysisHow VPN and proxy infrastructure changes the IP signals seen by applications, and how analysts should interpret those signals.DNS Security and Common Attack VectorsA technical overview of DNS spoofing, cache poisoning, amplification, tunneling, fast-flux infrastructure, and defensive controls.DNS Logging and OSINT: Extracting Intelligence from QueriesHow DNS logs support security analysis through query patterns, infrastructure mapping, behavioral correlation, and privacy-aware retention.DNS Caching Deep DiveHow DNS caching works across clients and recursive resolvers, why TTL matters, and how cached answers create propagation differences.DNS vs VPN LeaksHow DNS traffic can reveal resolver paths that differ from an expected VPN path, and what analysts should inspect during privacy troubleshooting.
