DomainTools Research

Protecting Against Supply Chain Attacks by Profiling Suppliers

The Devil’s in the Details: SUNBURST Attribution

Continuous Eruption: Further Analysis of the SolarWinds Supply Chain Incident

Identifying Network Infrastructure Related to a World Health Organization Spoofing Campaign

Identifying Critical Infrastructure Targeting through Network Creation

Unraveling Network Infrastructure Linked to the SolarWinds Hack

Extrapolating Adversary Intent Through Infrastructure

Current Events to Widespread Campaigns: Pivoting from Samples to Identify Activity

Analyzing Network Infrastructure as Composite Objects

Avaddon: The Latest RaaS (Ransomware-as-a-Service) to Jump on the Extortion Bandwagon

Revealing REvil Ransomware With DomainTools and Maltego

Hunting Avaddon Ransomware Infrastructure with Jupyter and DomainTools Iris API