Iris is a proprietary threat intelligence and investigation platform that combines enterprise-grade domain intelligence and risk scoring with industry-leading passive DNS data from Farsight Security and other top-tier providers. An intuitive web interface and API atop these data sources help security teams quickly and efficiently investigate potential cybercrime and cyberespionage.

The Polarity DomainTools Iris integration allows Polarity to search Iris for risk information on Domains and Link back out to IRIS if there is associated information less than the count that you set below.

More information on Iris: https://www.domaintools.com/products/iris

API Username associated with your DomainTools account.

API Key associated with your DomainTools account.

Minimum risk score a threat needs to have in order to be displayed.

The maximum number of pivots for linking out IRIS on a field.

Comma delimited list of domains that will not be searched

Domains that match the given regex will not be searched (if blank, no domains will be ignored)

Installation instructions for integrations are provided on the PolarityIO GitHub Page.

Polarity is a memory-augmentation platform that improves and accelerates analyst decision making. For more information about the Polarity platform please see:

https://polarity.io/