Usage

You can use the domaintools operator to enrich a number of domains and manage the observables based on the data returned from the enrichment. For example, you might want to tag domains with an Overall Risk Score greater than 80 as “dt_high_risk” and import them into ThreatStream as observables that are ingested by Integrator and sent to other security products as required.

Examples

Example 1: Retrieve domain intelligence data.

|domaintools url

Example 2: Enrich domains with third-party intelligence.

|domaintools "www.google.com"