pDNS Panel enhancements in Iris Investigate

Enhanced Passive DNS panel with scope filtering, duration tracking, quick date selection, and improved timestamp handling.

Changed

The Passive DNS panel in Iris Investigate has been enhanced with several new features:

• Scope selector: Filter results to show only apex domains (domaintools.com), only subdomains (www.domaintools.com), or both apex and subdomains
• Duration column: View how long each DNS record has been observed, providing insight into record persistence
• Days-back date filter: Quickly view recent results by selecting a number of days back instead of choosing specific dates from the calendar picker
• Improved timestamp handling: Timestamps are now stored in UTC and displayed in your local time based on your browser settings. Hover over any timestamp to see the UTC date and time

These enhancements make it easier to filter, analyze, and understand Passive DNS data during your investigations.

Documentation

• Iris Investigate user guide