Skip to content

Near real-time domain discovery in Iris Investigate

← All updates ·

Changed

Iris Investigate now provides significantly faster domain discovery and risk assessment:

Near real-time domain discovery:

  • Continuous discovery: Newly active domains are discovered throughout the day instead of daily batch updates
  • 20+ hour improvement: Domains are discovered an average of 20+ hours faster than the previous daily batch process
  • Immediate availability: Newly discovered domains appear in Iris Investigate as soon as they’re detected

Near real-time provisional risk scoring:

  • Phishing risk scores: Provisional phishing risk scores are calculated immediately following domain discovery
  • Proximity risk scores: Provisional proximity risk scores are generated in near real-time
  • Faster threat detection: Identify potential threats hours earlier than before

Daily DNS resolution:

  • Active domain monitoring: All active domains undergo daily DNS resolution
  • Current infrastructure data: Ensure you have up-to-date DNS information for your investigations

These improvements dramatically reduce the time between domain activation and detection, enabling faster response to emerging threats.

Documentation

Categories: Iris, Iris Investigate