SOAR Archives - DomainTools | Start Here. Know Now. https://www.domaintools.com/integrations/soar/ Start Here. Know Now. Tue, 15 Oct 2024 13:51:54 +0000 en-US hourly 1 https://wordpress.org/?v=6.7.2 ServiceNow https://www.domaintools.com/integrations/servicenow/ Tue, 15 Oct 2024 13:51:30 +0000 https://www.domaintools.com/?post_type=integration&p=31168 Orchestrate with DomainTools ServiceNow SIR is an orchestration and automation platform with major security incident management, Data Loss Prevention (DLP) incident response, and proven playbooks mapped to real-time actionable insights about changing security posture and attacker behavior. DevOps workflows across the cloud, on-premise, and hybrid environments. Combined with enterprise-grade domain and DNS-based intelligence from DomainTools, […]

The post ServiceNow appeared first on DomainTools | Start Here. Know Now..

]]> Orchestrate with DomainTools

ServiceNow SIR is an orchestration and automation platform with major security incident management, Data Loss Prevention (DLP) incident response, and proven playbooks mapped to real-time actionable insights about changing security posture and attacker behavior. DevOps workflows across the cloud, on-premise, and hybrid environments.

Combined with enterprise-grade domain and DNS-based intelligence from DomainTools, users can automate and orchestrate workflows involving Threat Intelligence Platform (TIP) Solutions, Data Enrichment, and Threat Intelligence with data delivered by the largest domain database with predictive risk scoring and passive DNS to provide a unique, fact-based, multifaceted view of global Internet infrastructure. SOCs can trigger Indicator of Compromise (IoC) investigations, block threats based on connected infrastructure, and identify potentially malicious incidents before weaponization.

Manage Digital Workflows to Rapidly Respond to Evolving Threats

  • DomainTools Iris Investigate App

    • Third-Party Risk Management: By integrating with DomainTools, ServiceNow can continuously monitor the domains of third-party entities for any signs of compromise or malicious activity.
    • Incident Response and Threat Intelligence: When a security incident occurs within the organization, ServiceNow can automatically trigger DomainTools queries to gather comprehensive threat intelligence about the domains involved and enrich incident tickets with information such as domain ownership details, historical DNS records, associated IP addresses, and known malicious activities.
    • Efficient Workflow Actions: Obtain infrastructure and whoIs data for up to 100 domains effortlessly, prioritize triaging with DomainTools’ risk score for effective incident management, and access infrastructure and whois data for up to 100 domains with ease.

  • Farsight DNSDB App

    • Enhanced Configuration Management: Seamlessly configure your DNSDB Flex, DNSDB RData, DNSDB Summarize RData, DNSDB RRSet, and DNSDB Summarize RRSet actions with ease.
    • DNSDB Integration: Leverage DNSDB Rate Limit functionality for efficient DNS database querying, ensuring optimal performance.
    • Streamlined Playbooks: Investigate domains associated with incidents, enriching them with detailed whois and infrastructure insights, and accessing associated subdomains effortlessly through Farsight’s DNSDB.
    • Actionable Insights: Execute actions such as Investigate Domain and DNSDB RData seamlessly within your playbooks for comprehensive incident resolution.

About ServiceNow

ServiceNow makes the world work better for everyone. Our cloud-based platform and solutions help digitize and unify organizations so that they can find smarter, faster, better ways to make work flow. So employees and customers can be more connected, more innovative, and more agile. And we can all create the future we imagine. The world works with ServiceNow.

Request a Demo

The post ServiceNow appeared first on DomainTools | Start Here. Know Now..

]]> Splunk SOAR https://www.domaintools.com/integrations/splunk-soar/ Tue, 26 Jul 2022 18:44:15 +0000 https://domaintools.wpengine.com/?post_type=integration&p=9569 Empower Your Investigations The DomainTools® App within Splunk SOAR enables you to block domain names based on Domain Risk Score, identify malicious connected infrastructure, and pivot within playbooks. Precisely Target Alerts and Hunt Threats Across Your Enterprise Support and Learning About Splunk SOAR The Splunk SOAR platform is designed to help customers dramatically scale their […]

The post Splunk SOAR appeared first on DomainTools | Start Here. Know Now..

]]> Empower Your Investigations

The DomainTools® App within Splunk SOAR enables you to block domain names based on Domain Risk Score, identify malicious connected infrastructure, and pivot within playbooks.

Precisely Target Alerts and Hunt Threats Across Your Enterprise

  • Enhance Your Playbooks

    • Use Domain Risk Score to predict how likely a domain is to be malicious and take automated actions informed by the severity and classification of the threat
    • Leverage domain name and IP address Whois lookups in ad-hoc actions on events
    • Make automated decisions in playbooks to enrich a Splunk event with connected domains and even block them proactively
    • Add domain name profiles, ownership history and hosting history automatically in any Splunk playbook
    • Discover how many domains share an identity, a name server, or a hosting IP
    • Find recently registered domains that match a keyword

  • Automate Your Playbooks

    • Speed incident handling by ensuring analysts have everything they need to triage an event
    • Avoid context switching and preserve important artifacts in an event context
    • Efficiently execute the best analyst workflows with no manual interventions
    • Take targeted action on risky domains informed by machine learning classifiers

Support and Learning

About Splunk SOAR

The Splunk SOAR platform is designed to help customers dramatically scale their security operations. With Splunk, you can automate tasks, orchestrate workflows, and support a broad range of SOC functions including event and case management, collaboration, and reporting.

Learn More

The post Splunk SOAR appeared first on DomainTools | Start Here. Know Now..

]]> DomainTools® Stories in Tines No-Code Automation https://www.domaintools.com/integrations/tines/ Tue, 01 Aug 2023 18:02:01 +0000 https://www.domaintools.com/?post_type=integration&p=24973 Intuitive playbooks accelerate enrichment, investigation, and enforcement DomainTools is the leader in Internet intelligence and the first place to go when you need to know. The DomainTools Stories in Tines let you make immediate and practical use of the answers found in DomainTools’ industry-leading databases of Internet infrastructure intelligence. The straightforward, drag-and-drop simplicity of Tines […]

The post DomainTools® Stories in Tines No-Code Automation appeared first on DomainTools | Start Here. Know Now..

]]> Intuitive playbooks accelerate enrichment, investigation, and enforcement
Iris Detect Workflow map

DomainTools is the leader in Internet intelligence and the first place to go when you need to know. The DomainTools Stories in Tines let you make immediate and practical use of the answers found in DomainTools’ industry-leading databases of Internet infrastructure intelligence. The straightforward, drag-and-drop simplicity of Tines stories makes them an ideal fit for SOC analysts, DevSecOps teams, detection engineers, and other cybersecurity professionals.

See DomainTools and Tines in Action

Watch On-Demand Demo

  • Browse the Tines Story Library

    Ready-made Stories cover multiple SOC use cases, including automation for:

    • Fast enrichment of domain names in Slack
    • Creation of blocking rules for lookalike domains
    • Pivoting investigations of suspicious infrastructure

  • Easy, Drag-and-Drop Playbook Creation

    Tines lets you:

    • Build classic SOAR capabilities such as endpoint detection and response and phishing response
    • Solve needs like indicator enrichment, monitoring and DevSecOps Slack bots
    • Automate repetitive and complex workflows

  • Streamline Key SOC Workflows

    SOC teams worldwide report the need to automate repetitive functions, but have trouble launching these initiatives because of resource constraints—mainly time and people. Tines Stories offer solutions for various use cases:

    • Threat Hunting
    • Incident Response
    • Detection Engineering
    • Brand Protection

Learn More

The post DomainTools® Stories in Tines No-Code Automation appeared first on DomainTools | Start Here. Know Now..

]]> Cortex XSOAR https://www.domaintools.com/integrations/cortex-xsoar/ Tue, 26 Jul 2022 18:44:33 +0000 https://domaintools.wpengine.com/?post_type=integration&p=9573 Orchestrate and Automate the Incident Response Process The DomainTools® App for Cortex XSOAR provides automation and orchestration of the incident response processes. Powered by the DomainTools Iris Investigate™ API, organizations will have access to essential domain profile, web crawl, SSL, and infrastructure data. Key Benefits Support and Learning About Cortex XSOAR CortexTM XSOAR is an extended […]

The post Cortex XSOAR appeared first on DomainTools | Start Here. Know Now..

]]> Orchestrate and Automate the Incident Response Process

The DomainTools® App for Cortex XSOAR provides automation and orchestration of the incident response processes. Powered by the DomainTools Iris Investigate™ API, organizations will have access to essential domain profile, web crawl, SSL, and infrastructure data.

Key Benefits

  • Triage and Investigate Malicious Network Traffic

    • Eliminate context switching with the ability to perform interactive investigations within the Cortex XSOAR War Room
    • Access to purpose-built commands that presents the respective domain intelligence
    • Automatically keep track of investigations performed for convenient incident reporting
    • Combat significant threats when automating the triage and investigation of malicious traffic

  • Automate Incident Enrichment and Response

    • Automate playbooks for enrichment of DNS observables
    • Access to the DomainTools dataset inside of Cortex XSOAR for persistent enrichment, automated investigations, and the associated connected infrastructure
    • Reduce reaction time when extracting and containing potential harmful information from malicious payloads

Support and Learning

About Cortex XSOAR

CortexTM XSOAR is an extended Security Orchestration, Automation and Response platform that unifies case management, automation, real-time collaboration and threat intel management to transform every stage of the incident lifecycle. Teams can manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case – resulting in significantly faster responses that require less manual review.

Learn More

The post Cortex XSOAR appeared first on DomainTools | Start Here. Know Now..

]]> Exabeam https://www.domaintools.com/integrations/exabeam/ Wed, 03 Aug 2022 14:00:12 +0000 https://domaintools.wpengine.com/?post_type=integration&p=13954 Exabeam is a global cybersecurity leader that adds intelligence to every IT and security stack. The leader in Next-gen SIEM and XDR, Exabeam is reinventing the way security teams use analytics and automation to solve Threat Detection, Investigation, and Response (TDIR), from common security threats to the most critical that are difficult to identify. Exabeam […]

The post Exabeam appeared first on DomainTools | Start Here. Know Now..

]]> Exabeam is a global cybersecurity leader that adds intelligence to every IT and security stack. The leader in Next-gen SIEM and XDR, Exabeam is reinventing the way security teams use analytics and automation to solve Threat Detection, Investigation, and Response (TDIR), from common security threats to the most critical that are difficult to identify. Exabeam offers a comprehensive cloud-delivered solution that leverages machine learning and automation using a prescriptive, outcomes-based approach to TDIR. We design and build products to help security teams detect external threats, compromised users and malicious adversaries, minimize false positives and best protect their organizations. For more information, visit www.exabeam.com.

Learn More About Exabeam

The post Exabeam appeared first on DomainTools | Start Here. Know Now..

]]> IBM Resilient https://www.domaintools.com/integrations/ibm-resilient/ Tue, 26 Jul 2022 18:43:37 +0000 https://domaintools.wpengine.com/?post_type=integration&p=9566 Orchestrate and Automate the Incident Response Process Integrating with your organization’s existing security and IT investments, the DomainTools® App for IBM Resilient provides crucial domain and DNS infrastructure intelligence that is needed to understand the intent and sophistication of threats and establish the appropriate response path. Key Benefits Support and Learning About IBM Resilient IBM […]

The post IBM Resilient appeared first on DomainTools | Start Here. Know Now..

]]> Orchestrate and Automate the Incident Response Process

Integrating with your organization’s existing security and IT investments, the DomainTools® App for IBM Resilient provides crucial domain and DNS infrastructure intelligence that is needed to understand the intent and sophistication of threats and establish the appropriate response path.

Key Benefits

  • Respond Faster and More Efficiently

    • Speed up incident handling by ensuring analysts have everything they need to triage an event
    • Leverage domain name and IP address Whois lookups in ad-hoc actions on events
    • Add domain name profiles, ownership history, and hosting history automatically in workflows
    • Discover how many domains share an identity, a name server, or a hosting IP
    • Avoid context switching and preserve important artifacts in an event context

    Download From IBM App Exchange

  • Orchestrate and Automate Response

    • Leverage DomainTools Risk Score to predict how likely a domain is to be malicious and take automated actions
    • Enrich an event with connected domains to inform workflows to take the appropriate action
    • Identify domains that have been tagged via your SOC/CSIRT within DomainTools inside of IBM Resilient

Support and Learning

About IBM Resilient

IBM Resilient Security Orchestration, Automation and Response (SOAR) Platform is the leading platform for orchestrating and automating incident response processes. IBM Resilient SOAR Platform quickly and easily integrates with your organization’s existing security and IT investments. It makes security alerts instantly actionable, provides valuable intelligence and incident context, and enables adaptive response to complex cyber threats.

Learn More

The post IBM Resilient appeared first on DomainTools | Start Here. Know Now..

]]> Rapid7 https://www.domaintools.com/integrations/rapid7/ Tue, 26 Jul 2022 18:45:08 +0000 https://domaintools.wpengine.com/?post_type=integration&p=9579 Rapid7 advances security with visibility, analytics, and automation delivered through their Insight cloud. Their solutions simplify the complex, allowing security teams to work more effectively with IT and development to reduce vulnerabilities, monitor for malicious behavior, investigate and shut down attacks, and automate routine tasks.

The post Rapid7 appeared first on DomainTools | Start Here. Know Now..

]]> Rapid7 advances security with visibility, analytics, and automation delivered through their Insight cloud. Their solutions simplify the complex, allowing security teams to work more effectively with IT and development to reduce vulnerabilities, monitor for malicious behavior, investigate and shut down attacks, and automate routine tasks.

Lean More About Rapid7

The post Rapid7 appeared first on DomainTools | Start Here. Know Now..

]]> TheHive and Cortex https://www.domaintools.com/integrations/thehive-and-cortex/ Tue, 26 Jul 2022 18:45:39 +0000 https://domaintools.wpengine.com/?post_type=integration&p=9582 Operationalize Your Incident Management Process Extending our open-source platform support to TheHive and Cortex, information security practitioners can optimize security incident management, automate threat intelligence analysis, and perform digital forensics. The DomainTools® integrations for TheHive and Cortex allow customers to investigate security incidents efficiently. The Analyzers look up domain names, IP addresses, e-mail addresses, SSL […]

The post TheHive and Cortex appeared first on DomainTools | Start Here. Know Now..

]]> Operationalize Your Incident Management Process

Extending our open-source platform support to TheHive and Cortex, information security practitioners can optimize security incident management, automate threat intelligence analysis, and perform digital forensics. The DomainTools® integrations for TheHive and Cortex allow customers to investigate security incidents efficiently. The Analyzers look up domain names, IP addresses, e-mail addresses, SSL hashes, and more leveraging the DomainTools Iris Investigate API.

Precisely Target Alerts and Hunt Threats Across Your Enterprise

  • Enrich Observables With Ease

    Improve the context on an observable by enriching domain artifacts on-demand with domain names, IP addresses, e-mail addresses, SSL hashes, and more.

  • Discover Connected Infrastructure

    Within an incident, have the ability to enrich data in an observable for review of the complete data set, including DomainTools Guided Pivots for associated domain artifacts.

  • Speed Up Incident Response Orchestration

    Automate incident handling procedures and reduce context switching by pivoting on key domain attributes.

Support and Learning

About TheHive And Cortex

A scalable, open source and free Security Incident Response Platform, tightly integrated with MISP (Malware Information Sharing Platform), designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with security incidents that need to be investigated and acted upon swiftly.

Learn More

The post TheHive and Cortex appeared first on DomainTools | Start Here. Know Now..

]]> ThreatConnect https://www.domaintools.com/integrations/threatconnect/ Tue, 26 Jul 2022 18:44:51 +0000 https://domaintools.wpengine.com/?post_type=integration&p=9576 Together, ThreatConnect and DomainTools Iris Investigate allow security analysts to automate intel processes, investigations, alert triage, and response actions leading to faster detection and response.

The post ThreatConnect appeared first on DomainTools | Start Here. Know Now..

]]> Together, ThreatConnect and DomainTools Iris Investigate allow security analysts to automate intel processes, investigations, alert triage, and response actions leading to faster detection and response.

Learn More

The post ThreatConnect appeared first on DomainTools | Start Here. Know Now..

]]> Torq https://www.domaintools.com/integrations/torq/ Thu, 28 Jul 2022 16:22:38 +0000 https://domaintools.wpengine.com/?post_type=integration&p=12213 Torq is a no-code automation and orchestration platform for security and operations. Built as an enterprise-grade software-as-a-service, Torq can be adopted with ease, delivering results within minutes, unlike traditional security automation solutions that require weeks or months of investment prior to providing value.

The post Torq appeared first on DomainTools | Start Here. Know Now..

]]> Torq is a no-code automation and orchestration platform for security and operations. Built as an enterprise-grade software-as-a-service, Torq can be adopted with ease, delivering results within minutes, unlike traditional security automation solutions that require weeks or months of investment prior to providing value.

Lean More About Torq

The post Torq appeared first on DomainTools | Start Here. Know Now..

]]>