logo
DomainTools Technical Documentation
Playbooks
Initializing search
    • Home
    • Admin
      • Group Management
    • APIs + SDKs
      • Farsight DNSDB API
        • OpenAPI Spec
        • v2 Reference
        • v1 Reference
        • Streaming Protocol
        • Scout API
        • DNSDB Tools on GitHub
      • Farsight SIE API
        • OpenAPI Spec
        • SIE Batch API Reference
        • SIE Remote Access (AXA) API Reference
        • SIE Tools on GitHub
      • General Information
        • Authentication
        • Error Codes
        • Rate Limits
        • Account Information
      • Iris API
        • Iris Detect
          • Reference
        • Iris Enrich
          • Reference
        • Iris Investigate
          • Reference
        • OpenAPI Specification
        • Python Wrapper
      • Lookup APIs
        • Domain Profile
        • Domain Reputation
        • Domain Risk Score
        • Domain Search
        • Hosting History
        • Pared Domain RDAP
        • Parsed WHOIS
        • Reverse IP
        • Reverse IP WHOIS
        • Reverse Name Server
        • Reverse WHOIS
        • WHOIS History
        • WHOIS Lookup
      • Monitor APIs
        • Brand Monitor
        • IP Monitor
        • IP Registrant Monitor
        • Name Server Monitor
        • Registrant Monitor
      • Threat Intelligence Feeds
      • OpenAPI Specifications
      • SOAR Resources
    • Risk Score
      • Userguide
    • Farsight DNSDB
      • DNSDB FAQ
      • DNSDB Export
        • User Guide
      • DNSDB Scout
        • DNSDB Scout User Guide
        • Flexible Search with DNSDB Scout User Guide
      • DNSDB Search
        • DNSDB Flexible Search Technical Reference
        • DNSDB Glob Reference
        • DNSDB Regular Expressions Reference
        • DNSDB Time Fencing Guide
        • dnsdbflex Flexible Query Tool
        • DNSDBQ Query Tool
      • Farsight Tools on GitHub
    • Farsight SIE
      • SIE User Guide
      • NOD User Guide
      • SIE Batch
        • SIE AXA User Guide
        • SIE NMSG User Guide
        • SIE Tutorials
      • Farsight Tools on GitHub
    • Integrations
      • Anomali
      • Crowdstrike
      • Elastic
        • Real-time Feeds
        • DomainTools App
      • Google Chronicle SIEM
      • IBM QRadar
      • Maltego
        • Iris Transforms for Maltego
        • DNSDB Transforms for Maltego
        • DNSDB Transforms Technical Reference
      • Microsoft Sentinel
      • MISP
      • Palo Alto XSOAR
        • DomainTools
        • Iris Detect
        • DNSDB
      • Splunk
        • Splunk and Splunk ES 5
        • Splunk SOAR
      • ThreatQ
      • Tines
    • Iris
      • Iris Investigate
        • User Guide
        • Tutorial
      • Iris Detect
        • User Guide
    • Classic Tools
    • Threat Intelligence Feeds
      • Daily Feeds
      • Realtime Feeds
        • User Guide
        • SwaggerHub ↗
        • Parsed Domain RDAP FAQ
    • DomainTools Main ↗
    • Recent Updates ↗
    • Investigations ↗

    SOAR Resources

    SOAR Playbooks: https://github.com/DomainTools/playbooks

    SOAR Workflows: https://github.com/DomainTools/examples-workflow