Cortex XSOAR Iris pack: new domain enrichment controls

← All updates · March 3, 2026

Added

Domain Result Type (v2.2.6): The domain command takes a result-type setting that controls what it returns. iris returns full Iris Investigate results; verdict returns only the domain risk score, for faster indicator triage.
Domain Enrichment Method (v2.2.7): Choose which DomainTools method enriches domains. Defaults to Iris Investigate.
Domain Auto-Enrich on Ingestion (v2.2.7): Enable automatic enrichment of domains as they are ingested, so incoming indicators arrive already enriched. Automatic enrichment consumes Iris API queries; leave it off if you want to control query volume manually.