Domaintools

DomainTools is a leading provider of domain name and DNS-based cyber threat intelligence solutions. Their services enable security analysts to investigate malicious activity, map connected infrastructure, and assess risks associated with domain names. By leveraging extensive datasets, including Whois records, DNS data, and SSL certificate information, DomainTools helps organizations profile attackers, guide online fraud investigations, and map cyber activity to attacker infrastructure. 

Key offerings from DomainTools include:
• Iris Investigate: An investigation platform that delivers comprehensive domain name attributes, such as Risk Score, DNS, Whois, and SSL details. It facilitates easy pivoting through different domain attributes and uncovers meaningful insights, aiding in threat attribution and incident response efforts. 
• Iris Enrich: Supports high query volumes of domain name attributes, including Whois, DNS, SSL certificate, and risk scoring elements. This service integrates DomainTools data with SIEM, SOAR, and other security tools to enhance threat detection and response capabilities. 
• Threat Intelligence Feeds: Provides daily risk-scored domain lists and targeted feeds, offering predictive risk scoring and infrastructure profiling to help organizations stay ahead of emerging threats.

Category: