pDNS Panel enhancements in Iris Investigate
Changed
The Passive DNS panel in Iris Investigate has been enhanced with several new features:
- Scope selector: Filter results to show only apex domains (domaintools.com), only subdomains (www.domaintools.com), or both apex and subdomains
- Duration column: View how long each DNS record has been observed, providing insight into record persistence
- Days-back date filter: Quickly view recent results by selecting a number of days back instead of choosing specific dates from the calendar picker
- Improved timestamp handling: Timestamps are now stored in UTC and displayed in your local time based on your browser settings. Hover over any timestamp to see the UTC date and time
These enhancements make it easier to filter, analyze, and understand Passive DNS data during your investigations.
Documentation
Categories: Iris, Iris Investigate