What Does WhoIs Data have to do with Cybersecurity
ID: 7e9f441c-eba0-560c-8a2e-27975ecd08fc
STIX ID: report--7e9f441c-eba0-560c-8a2e-27975ecd08fc
Feed Name: DomainTools
DomainTools outlines how Whois and DNS history enable threat investigations, citing Mandiant/FireEye and Crowdstrike coverage of an Iranian-linked actor and demonstrating a step-by-step link analysis (phishing domain aeroconf2014.org → [email protected] → [email protected] → ddddddddddd445624.com → registrant Ali Alavi → youthpartyofiran.com). The post emphasizes DomainTools’ comprehensive historical domain/IP data and previews a forthcoming unified searchable product to accelerate such investigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.