DomainTools App for Demisto - Comprehensive, Contextual and Automated Incident Response
ID: 130dc1d4-899c-58e8-93a4-bd0bd4211d71
STIX ID: report--130dc1d4-899c-58e8-93a4-bd0bd4211d71
Feed Name: DomainTools
This document introduces the DomainTools Iris integration for Demisto (Cortex XSOAR), which automates DNS intelligence enrichment and enables interactive domain investigations directly in the War Room. It highlights two primary use cases—ad hoc DNS investigations and automated enrichment via playbooks—allowing teams to correlate indicators, store enrichment in indicator tables, and streamline response workflows by reducing manual triage.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
