Strengthen Your Investigations’ Resolve with pDNS
ID: 79ca06a3-c78b-5f00-9a29-821d76f36bd4
STIX ID: report--79ca06a3-c78b-5f00-9a29-821d76f36bd4
Feed Name: DomainTools
This document introduces passive DNS (pDNS) and details how DomainTools’ Iris Investigate platform uses curated pDNS sources with pivoting and guided pivots to uncover infrastructure links, detect DNS tunneling, track fast flux changes, predict BEC setup via SPF/DKIM, and identify DNS hijacking; it emphasizes the value of historical DNS visibility and integration with WHOIS, IP, NS, and SSL datasets for comprehensive investigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.