Near real-time domain discovery in Iris Investigate
Changed
Iris Investigate now provides significantly faster domain discovery and risk assessment:
Near real-time domain discovery:
- Continuous discovery: Newly active domains are discovered throughout the day instead of daily batch updates
- 20+ hour improvement: Domains are discovered an average of 20+ hours faster than the previous daily batch process
- Immediate availability: Newly discovered domains appear in Iris Investigate as soon as they’re detected
Near real-time provisional risk scoring:
- Phishing risk scores: Provisional phishing risk scores are calculated immediately following domain discovery
- Proximity risk scores: Provisional proximity risk scores are generated in near real-time
- Faster threat detection: Identify potential threats hours earlier than before
Daily DNS resolution:
- Active domain monitoring: All active domains undergo daily DNS resolution
- Current infrastructure data: Ensure you have up-to-date DNS information for your investigations
These improvements dramatically reduce the time between domain activation and detection, enabling faster response to emerging threats.
Documentation
Categories: Iris, Iris Investigate