Overview

DomainTools is the global leader for Internet intelligence that enables security practitioners to stop threats before they happen, using best-in-class internet intelligence data, detection and monitoring tools, and predictive risk scoring.

DomainTools enterprise protection solutions are powered by the freshest, most complete domain and DNS infrastructure data - captured in real-time.

DomainTools offers 3 Logic Apps for Microsoft Sentinel that are designed to work independently or together:

DNSDB API: Historical passive DNS data, updated in real-time

Discover and analyze emerging campaigns with the ability to connect seemingly unrelated adversary-controlled assets by pivoting through domains, IP addresses, name servers, and other clues stored in DNS Resource Records.

Iris Investigate: Accelerated analysis of malicious online infrastructure

Enables easy pivoting through different domain name attributes (Risk Score, DNS, Whois, SSL, and more) and exposes meaningful insights with connection counts on most data fields.

Iris Enrich: Automated enrichment of domain and IP indicators

Supports high query volumes of domain name attributes, actionable insights at scale with enterprise-class ingestion, and a seamless view of data to provide an easy transition from SIEM alert to human analysis.

Additionally, DomainTools provides fast returns of domain intelligence to enhance security investigations and incident response workflows within Microsoft Security Copilot.

Plans

DNSDB - Enrich and contextualize investigations with DNS activity, and domain-IP mapping based on DNS traffic observed by the largest Passive DNS sensor network.

Iris Investigate - Add detailed information about a domain threat indicator, pivot on IP, email or SSL indicators, and adjust incidents with risk scoring.

Iris Enrich - Enrich up to 6,000 domains/minute with DomainTools intelligence using bulk lookups against the Iris Enrich interface.

Newly Observed Domains (NOD) - Discover and take action against newly configured domains to obstruct malware, disrupt phishing attempts, and protect users from spam.

Domain Hotlist - Enhance the detection and blocking of malicious infrastructure via a daily risk-scored domain database.

Learn more about each package at https://www.domaintools.com/solutions/use-cases/threat-intelligence/.

To request pricing or a demo contact us at cloudmarketplaceoffers@domaintools.com

DomainTools Threat IntelligenceDomainTools

DomainTools Threat Intelligence

DomainTools

DomainTools Threat Intelligence

DomainTools

DomainTools Threat Intelligence
DomainTools