News
Silobreaker integration with DomainTools enriches threat intelligence context and visibility
January 2023 by Marc Jacob
Silobreaker announced a new integration with DomainTools, the leader in Internet intelligence. DomainTools’ trusted domain, website, and DNS data is now available directly with Silobreaker, and enables customers to investigate domains and IPv4 addresses quickly and efficiently for malicious activity.
Every day, tens of thousands of domains are registered on the Internet for phishing, command and control, data exfiltration, and many other dangerous activities. DomainTools continually monitors the Internet and brings together the most comprehensive and trusted data to provide immediate context on these domains.
The newly integrated Silobreaker/DomainTools enrichment card identifies malicious activity with clear risk scores across four categories – phishing, malware, spam, and proximity (how closely connected a domain is to other known-bad domains). Silobreaker enhances this data by combining it with millions of sources across the open, dark web, and other premium provider data sets to reveal threat actor use of domains, their potential targets, and TTPs (Tactics, Techniques, and Procedures).
The integration also enables analysts to pivot seamlessly into the DomainTools Iris Investigate platform from Silobreaker to perform in-depth domain analysis using certificates, registration history, and even screenshots of phishing sites.
Together, Silobreaker and DomainTools offer world-leading intelligence and enrichment and provide the context threat analysts need to deliver actionable intelligence faster and help reduce risk.
