ServiceNow

Orchestrate with DomainTools

ServiceNow SIR is an orchestration and automation platform with major security incident management, Data Loss Prevention (DLP) incident response, and proven playbooks mapped to real-time actionable insights about changing security posture and attacker behavior. DevOps workflows across the cloud, on-premise, and hybrid environments.

Combined with enterprise-grade domain and DNS-based intelligence from DomainTools, users can automate and orchestrate workflows involving Threat Intelligence Platform (TIP) Solutions, Data Enrichment, and Threat Intelligence with data delivered by the largest domain database with predictive risk scoring and passive DNS to provide a unique, fact-based, multifaceted view of global Internet infrastructure. SOCs can trigger Indicator of Compromise (IoC) investigations, block threats based on connected infrastructure, and identify potentially malicious incidents before weaponization.

‍

DomainTools Iris Investigate App

• Third-Party Risk Management: By integrating with DomainTools, ServiceNow can continuously monitor the domains of third-party entities for any signs of compromise or malicious activity.
• Incident Response and Threat Intelligence: When a security incident occurs within the organization, ServiceNow can automatically trigger DomainTools queries to gather comprehensive threat intelligence about the domains involved and enrich incident tickets with information such as domain ownership details, historical DNS records, associated IP addresses, and known malicious activities.
• Efficient Workflow Actions: Obtain infrastructure and whoIs data for up to 100 domains effortlessly, prioritize triaging with DomainTools’ risk score for effective incident management, and access infrastructure and whois data for up to 100 domains with ease.

‍

Farsight DNSDB App

• Enhanced Configuration Management: Seamlessly configure your DNSDB Flex, DNSDB RData, DNSDB Summarize RData, DNSDB RRSet, and DNSDB Summarize RRSet actions with ease.
• DNSDB Integration: Leverage DNSDB Rate Limit functionality for efficient DNS database querying, ensuring optimal performance.
• Streamlined Playbooks: Investigate domains associated with incidents, enriching them with detailed whois and infrastructure insights, and accessing associated subdomains effortlessly through Farsight’s DNSDB.
• Actionable Insights: Execute actions such as Investigate Domain and DNSDB RData seamlessly within your playbooks for comprehensive incident resolution.

‍