FeedDomainTools Pack v1.0.7 for Cortex XSOAR: Risk score detail in feed indicators

← All updates · May 10, 2026

Changed

• Risk score details in rawJSON for feed indicators — The rawJSON payload for domainrisk and domainhotlist feed indicators now includes the full risk score breakdown:

  • Overall score
  • Component scores (proximity, phishing, malware, spam)
  • Threat type classifications

  Analysts can see the complete risk context directly in the XSOAR indicator table and war room without an additional lookup.

Documentation

• Palo Alto XSOAR: DomainTools app
• Domain Risk Score user guide
• Domain Risk feed
• Domain Hotlist feed
• FeedDomainTools on Cortex Marketplace
• Palo Alto Networks integrations

Categories: Integrations, Cortex XSOAR, Threat Feeds