Enriching Data with Farsight DNSDB

Farsight DNSDB is a freemium enrichment that enables you to leverage Farsight DNSDB data on the Farsight tab in the Enrichments section on observable details pages.

View documentation on the Farsight DNSDB enrichment for Anomali

To activate the Farsight DNSDB enrichment:

  1. Navigate to ThreatStream > APP STORE > APP Store.

  2. Locate the Farsight DNSDB enrichment.

  3. Click Get Access on the Farsight DNSDB tile.
  4. Click I have credentials on the wizard page that opens.
  5. On the next wizard page that opens, click Credentials and then enter your Farsight DNSDB API Key.
  6. Click Activate.

The Farsight DNSDB enrichment is now active.

Alternatively, you can activate the enrichment in ThreatStreat settings under the Integrations tab.

  • To learn more about the Farsight DNSDB public API, visit https://api.dnsdb.info/

  • The Farsight DNSDB public API limits requests from individual users to 25 per hour and 500 per month. Each query is limited to 256 results from the last 90 days.