Skip to main content

DomainTools Iris Detect

Download With Dependencies

Iris Detect protects against malicious domains impersonating your brands and supply chain.

About DomainTools Iris Detect

Threat Actors Move Fast. Detect Helps You Move Faster.
Iris Detect is an Internet infrastructure detection, monitoring, and enforcement tool (UI and API) built on the industry’s fastest and broadest domain discovery engine and the largest databases of domain data. Capturing key data on new domains and risk-scoring them within minutes of discovery, Detect is a game-changer for brand managers, digital risk and fraud prevention teams, and network defenders.

Key Benefits:

  • Rapid Discovery of Infringing Domains
  • Continuous Monitoring of Evolving Infrastructure
  • Enforcement Actions for Dangerous Domains

The DomainTools Iris Detect content pack works independently or alongside the DomainTools Iris content pack. It works with the Iris Detect APIs to
help you discover, track, and act against lookalike domains. A DomainTools key provisioned for Iris Detect is required.

Configure the pack to ingest and optionally create incidents off of new, watched, or escalated domains on a scheduled basis, as frequently as hourly. Indicator mappings and layouts help you act on the domains.

Available actions

  1. domaintools-iris-detect-get-monitor-list
  2. domaintools-iris-detect-get-new-domains
  3. domaintools-iris-detect-get-changed-domains
  4. domaintools-iris-detect-get-blocked-domains
  5. domaintools-iris-detect-get-escalated-domains
  6. domaintools-iris-detect-watch-domains
  7. domaintools-iris-detect-blocklist-domains
  8. domaintools-iris-detect-escalate-domains
  9. domaintools-iris-detect-ignore-domains

About DomainTools Iris Detect

Threat Actors Move Fast. Detect Helps You Move Faster.
Iris Detect is an Internet infrastructure detection, monitoring, and enforcement tool (UI and API) built on the industry’s fastest and broadest domain discovery engine and the largest databases of domain data. Capturing key data on new domains and risk-scoring them within minutes of discovery, Detect is a game-changer for brand managers, digital risk and fraud prevention teams, and network defenders.

Key Benefits:

  • Rapid Discovery of Infringing Domains
  • Continuous Monitoring of Evolving Infrastructure
  • Enforcement Actions for Dangerous Domains

The DomainTools Iris Detect content pack works independently or alongside the DomainTools Iris content pack. It works with the Iris Detect APIs to
help you discover, track, and act against lookalike domains. A DomainTools key provisioned for Iris Detect is required.

Configure the pack to ingest and optionally create incidents off of new, watched, or escalated domains on a scheduled basis, as frequently as hourly. Indicator mappings and layouts help you act on the domains.

Available actions

  1. domaintools-iris-detect-get-monitor-list
  2. domaintools-iris-detect-get-new-domains
  3. domaintools-iris-detect-get-changed-domains
  4. domaintools-iris-detect-get-blocked-domains
  5. domaintools-iris-detect-get-escalated-domains
  6. domaintools-iris-detect-watch-domains
  7. domaintools-iris-detect-blocklist-domains
  8. domaintools-iris-detect-escalate-domains
  9. domaintools-iris-detect-ignore-domains

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

CertificationRead more
Supported ByPartner
CreatedJuly 5, 2023
Last ReleaseJuly 9, 2024
WORKS WITH THE FOLLOWING INTEGRATIONS:
DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.