DomainTools App for Splunk SOAR v1.8: Threat Feeds ingest

← All updates · January 28, 2026

Added

• Domain Risk feed ingest: Ingest the Domain Risk feed of high-risk domains (risk score 70+) as SOAR artifacts.
• Domain Hotlist feed ingest: Ingest the Domain Hotlist feed of active high-risk domains (24-hour activity) as SOAR artifacts.

Changed

• Minimum supported Splunk SOAR version: The minimum supported Splunk SOAR version for this app is now 6.1.1. See the configuration guide for current platform requirements.

Documentation

• Splunk SOAR integration overview
• Actions reference
• Configuration guide

Categories: Integrations, Splunk