DomainTools integrations
Connect DomainTools domain intelligence to your security stack. Each integration ships as a native app, connector, or playbook for its platform. No custom development required.
- Splunk Enterprise and Cloud: Iris Investigate/Enrich, Farsight DNSDB
- Microsoft Sentinel: Iris Investigate, Iris Enrich, Farsight DNSDB
- Elastic: Iris Investigate/Enrich, Threat Feeds (Newly Observed Domains)
- Google Chronicle: Iris Investigate/Enrich, risk scoring
- IBM QRadar: Farsight DNSDB, Iris Investigate/Enrich
- Splunk SOAR: Iris Investigate/Enrich
- Palo Alto Cortex XSOAR: Iris Investigate
- Google SecOps SOAR: Iris Investigate, WHOIS History, RDAP
- ServiceNow: Iris Investigate/Enrich, Iris Detect, Farsight DNSDB
- Tines: Iris Investigate/Enrich (workflow automation)
- Palo Alto Cortex XSIAM: Iris Investigate
- CrowdStrike: Iris Investigate (Threat Intelligence + SOAR Actions)
Threat intelligence platforms
Section titled “Threat intelligence platforms”- Anomali: Iris Investigate, Iris Detect, Farsight DNSDB
- ThreatQ: Iris/DomainTools APIs
- MISP: DomainTools APIs
Investigation
Section titled “Investigation”- Maltego: Iris Investigate transforms, Farsight DNSDB transforms
- TheHive + Cortex: DomainTools APIs