Today, DomainTools announced the release of the DomainTools Iris App for Anomali Threatstream. This integration provides Anomali users with pivot-based context enrichment for domain names, IP addresses, hostnames and SSL hashes in the Threatstream “Explore” feature.
The global risk of cybercrime continues to grow in seriousness and complexity for businesses of all sizes. Today, 40 percent of security teams spend 51-100 staff hours per day triaging and investigating alerts, while 19 percent spend more than 100 hours, according to a recent report from the Ponemon Institute and DomainTools. Security practitioners are inundated with threat alerts, but often lack the resources to adequately investigate them. As the cybersecurity industry becomes increasingly aware of the importance of proactively hunting threats, there is a critical need for effective and sophisticated tools that streamline the process of identifying, monitoring and mitigating potential threats, and improve the speed and accuracy of threat response.
“Threat intelligence has become a top priority for the majority of organizations, as highlighted by a recent Cybersecurity Insiders survey, which revealed 64 percent of respondents see it as a critical component to the effectiveness of their threat hunting tools,” said Corin Imai, senior security advisor at DomainTools. “With organizations searching for more robust tools to detect threats earlier and reduce as much risk as possible, this integration was an obvious solution to address the most pressing needs of our customers and Anomali’s user base. Together, the products demonstrate a mutual commitment to providing security teams with comprehensive and sophisticated investigative capabilities.”
The DomainTools Iris App for Anomali enhances threat intelligence and investigations through pivot enrichment, context enrichment for domains, IPs, Emails and SSL Certificate Hashes. Through this DomainTools powered API, businesses are able to have a deeper analysis of potential risk resulting in a more safeguarded organization.
“We want to make it easy and simple for organizations to have access to threat intelligence that can be used to detect, prioritize and mitigate threats. Partners who integrate their solutions into Anomali via our SDK are contributing to an ecosystem that delivers on this promise,” said Dan Barahona, CMO, Anomali. “The pivoting features in DomainTools Iris are designed to help streamline investigations. By adding them to the Anomali Threat Platform, we’re helping cybersecurity professionals to get more out of their research and to improve defenses against future threats.”
For additional information on DomainTools Iris Investigation Platform, please visit: https://www.domaintools.com/products/iris. For more information on the DomainTools Iris API or the integration with Anomali, please visit: https://www.domaintools.com/partners/integrations/anomali/?utm_source=anomali-release&utm_medium=pr&utm_campaign=anomali-2019-release.
Source: DomainTools
http://www.domaintools.com