IBM Resilient

Orchestrate and Automate the Incident Response Process

Integrating with your organization’s existing security and IT investments, the DomainTools® App for IBM Resilient provides crucial domain and DNS infrastructure intelligence that is needed to understand the intent and sophistication of threats and establish the appropriate response path.

Respond Faster and More Efficiently

• Speed up incident handling by ensuring analysts have everything they need to triage an event
• Leverage domain name and IP address Whois lookups in ad-hoc actions on events
• Add domain name profiles, ownership history, and hosting history automatically in workflows
• Discover how many domains share an identity, a name server, or a hosting IP
• Avoid context switching and preserve important artifacts in an event context

Download From IBM App Exchange

‍

Orchestrate and Automate Response

• Leverage DomainTools Risk Score to predict how likely a domain is to be malicious and take automated actions
• Enrich an event with connected domains to inform workflows to take the appropriate action
• Identify domains that have been tagged via your SOC/CSIRT within DomainTools inside of IBM Resilient