Enriching Data with WhoisXMLAPI

The WhoisXMLAPI premium enrichment provides you access to billions of domain and DNS records owing to the WhoisXMLAPI collection of APIs. Map and study all connections across domain names, current and historical resource owners, IP addresses, subdomains, NS and MX servers, and more.

View documentation on the WhoisXMLAPI enrichment for Anomali

Before activating the WhoisXMLAPI enrichment, obtain your WhoisXMLAPI Key and Threat Intelligence Key from your WhoisXMLAPI Key account.

To activate the WhoisXMLAPI enrichment:

1. Navigate to ThreatStream > APP STORE > APP Store.

2. Locate the WhoisXMLAPI enrichment.

3. Click Get Access on the WhoisXMLAPI tile.
4. On the wizard page that opens, click I have credentials.
   
5. On the next wizard page that opens, click Credentials and enter your WhoisXMLAPI Key and Threat Intelligence Key.
   
6. Click Activate.

The WhoisXMLAPI enrichment is now active.