Domain Tools Splunk Integration

The domaintools app for splunk allows customers to rapidly enrich domains with tagging domain risk score domain age whois ips active dns website ssl certificate data to surface evidence of malicious activity.

Domain tools splunk integration. Integrate with developer tools. The domaintools app for splunk provides direct access within splunk to industry leading threat intelligence data on domain names the individuals who control them and the infrastructure that. Domaintools use domaintools to query various current and historical data regarding domain names domain registration and ips use the domaintools iris investigate api to profile domain names get risk scores and find connected domains that share the same whois details web hosting profiles ssl certificates and more. Customers who deploy the app in splunk benefit from.

With this in mind organizations need the ability to execute high volume queries with increased response times. Command line cli rest or soap. If not what are the appropriate setting for the whois management input in es. Removing sa domaintools and recreating the credentials seemed to fix the domaintools for splunk app.

The domaintools app provides direct access to domaintools industry leading threat intelligence data predictive risk scoring and critical tactical attributes to gain situational awareness on malicious domains inside of splunk. We have a new domaintools app supporting splunk 8 x environments and built on the latest sdk. Splunk mint management console integrates with third party developer tools then reports issues to these tools in real time helping developers track improvements and fix bugs with less effort and more agility. Does the ta domaintools app now being properly configured automatically integrate with the splunk enterprise security app for the domain analysis dashboards.

Splunk phantom integration empower your investigations with splunk phantom and domaintools the domaintools app within splunk phantom enables you to block domain names based on domain risk score identify malicious connected infrastructure and pivot within playbooks. Search with splunk from another application choose your api.