DomainTools integration for Google SecOps SOAR v11.0
Added
- Iris Investigate Enrichment: Run a domain through DomainTools Iris Investigate from a playbook; returns a comprehensive domain profile including connected infrastructure, related domains, and risk indicators.
- Whois History: Surface historical WHOIS records to track ownership and registration changes over time.
- Parsed RDAP Lookups: Pull structured RDAP registration data for any domain.
- Connectivity Validation: Health check that validates DomainTools API credentials and confirms the integration is configured correctly.
Documentation
- Google SecOps SOAR integration overview
- DomainTools — Google SecOps SOAR Marketplace — Google’s setup and configuration documentation
Categories: Integrations, Google SecOps