Microsoft Sentinel integration v1.0: Initial release

← All updates · February 21, 2023

Added

• DNSDB support: Query passive DNS data directly from Sentinel playbooks
• Iris Enrich support: Enrich domains with threat intelligence data
• Iris Investigate support: Investigate domains using Iris Investigate capabilities
• Sentinel playbooks: Pre-built playbooks for common threat intelligence workflows

This initial release enables security teams to leverage DomainTools threat intelligence directly within their Microsoft Sentinel environment.

Documentation

• Microsoft Sentinel integration documentation

Categories: Integrations, Microsoft Sentinel