Changelog
Stay informed about the latest improvements, new features, and changes to DomainTools products and services.
Integrations
Third-party platform integrations for seamless threat intelligence workflows.
Splunk, Python SDK, Cortex XSOAR, Cortex XSIAM, ServiceNow, Palo Alto Networks, Microsoft Sentinel, MISP, QRadar SOAR, Google Chronicle, Google SecOps, Anomali
Iris
Threat intelligence platform for investigating domains and detecting threats.
Threat Feeds
Real-time and daily threat intelligence feeds for proactive defense.
All updates
- Farsight DNSDB Scout v2.6.1: Export and search fixes
Farsight DNSDB Scout v2.6.1 defangs Standard Search export filenames, clarifies search inputs and errors, and fixes RData CNAME chase labels.
- DomainTools Feed v1.2.0: Ingest IP threat feeds in Cortex XSOAR
DomainTools Feed v1.2.0 adds IP Hotlist and IP Risk feed ingestion to Cortex XSOAR with IP indicators and investigation fields.
- HMAC-signed Threat Feed requests in DomainTools Python SDK v2.10
Version 2.10 of the DomainTools Python SDK adds HMAC-signed requests to Real-time Threat Feeds, download support, and expanded CLI controls.
- DomainTools App for Splunk SOAR v2.1: Python 3.13 support
Version 2.1 of the DomainTools App for Splunk SOAR adds Python 3.13 support for Splunk SOAR environments.
- Microsoft Sentinel adds DomainTools Threat Feeds connector
The DomainTools CCF solution ingests Newly Observed Domains, Newly Active Domains, Newly Observed Hostnames, and Domain Discovery records into Microsoft Sentinel.
- DomainTools App for Splunk v5.8: IP Threat Feed searches
Version 5.8 of the DomainTools App for Splunk adds IP Hotlist and IP Risk searches, scheduled indexing, and expanded Threat Feeds controls.
- DomainTools App for Splunk v5.7: IrisQL search support
Version 5.7 of the DomainTools App for Splunk adds text-based IrisQL queries to the dtirisinvestigate custom search command.
- DomainTools Python SDK v2.9: Query IP Threat Feeds
Version 2.9.0 of the DomainTools Python SDK adds IP Hotlist and IP Risk feed methods, while version 2.8.1 improves Iris Enrich resilience.
- DomainTools Feeds Integration for Elastic v1.6.0: header-based authentication
Version 1.6.0 of the DomainTools Feeds Integration for Elastic sends your API credentials in a request header instead of the URL query string.
- Filter Iris Detect domains by First Seen date
You can now filter a monitor's domain list by a First Seen date range across all domain-state tabs.