The Investigation Insights – WhoisXMLAPI integration enables analysts to have immediate domain history and awareness when searching domains and IP addresses. Enabling analysts to quickly understand a domains history allowing them to triage if it is related to malicious intent or not.
Examples
WhoisXMLAPI Data Overview
- Summary Tags: When analyst looks up information in WhoisXMLAPI they will quickly be able to see who owns the IP or domain, and when it was created.
- Balance Information: When drilling into the details of the the WhoisXMLAPI data analysts will be able to quickly pivot out to see the amount left on their API balance.
- Additional Context: While also looking at the details of the integration analysts will be able to get a lot of additional context. From Whois and Whois history, DNSlookup context, subdomain information and more. Allowing the analyst to get a complete picture of the indicators.
