A system for detecting network assets or attributes related to a network entity includes an input interface and a processor. The input interface is to receive a seed. The seed is associated with the network entity. The processor is to determine a first set of network assets or attributes associated with the seed and to determine a second set of network assets or attributes based at least in part on the first set of assets or attributes.