Skip to content
DomainTools Technical Documentation

Cortex XSIAM integration v1.0

← All updates ·

Added

  • Iris Investigate in Cortex XSIAM: Enrich incidents with domain profile, web crawl, SSL, and infrastructure data from the Iris Investigate API.
  • Automated IoC investigation: Trigger investigations of suspicious domains as part of XSIAM playbooks.
  • Infrastructure pivoting: Identify connected infrastructure to surface related threats before weaponization.
  • Risk scoring with components and evidence: Surface risk scores and the signals behind them directly in XSIAM.

Documentation

Categories: Integrations, Palo Alto Networks, Cortex XSIAM, Iris Investigate