© 2025 DomainTools
DomainTools® and DomainTools™ are owned by DomainTools, all rights reserved.
Join DomainTools and RedSense for context regarding the state of ransomware within healthcare and discoveries and methodologies from DomainTools research in phishing, malware, and spam that impact information security professionals.
Identify and flag domains that have the potential to become malicious using DomainTools Risk Scoring.
Join DomainTools for a presentation on how Internet intelligence supports a Zero Trust initiative.
In this upcoming live demonstration, we’ll demonstrate how new capabilities in Iris Investigate help threat intelligence managers, IR teams, and SOC managers quickly identify malicious infrastructure to mitigate future attacks.
Join subject matter experts including our CTO, CISO, and Security Evangelist for a discussion on their information security predictions for 2024.
Join us to learn about DomainTools products and data as a replacement for the end-of-life RiskIQ product suite.
The latest updates and enhancements to the DomainTools App for Cortex XSOAR represent the most significant update to the app in years, including new commands, expanded result sets, and playbooks enabling users to better automate and streamline their threat hunting processes and incident response capabilities.
Join DomainTools experts in an on-demand webinar where they delve into the technical foundations of accurate risk prediction for new and unseen domains, the pivotal role of Internet intelligence in defensive and investigative tools, and how DomainTools excels in discovering and mapping emerging infrastructure ahead of the competition.
In this live presentation, Daniel Schwalbe will use Farsight DNSDB Scout to show how to easily and quickly uncover previously unknown connections between seemingly unrelated assets.
Join us to learn about DomainTools “recipes” for practical application of Internet Intelligence in a variety of SOC tools.
Join us to learn about the latest DomainTools Apps for Splunk, offering enhanced capabilities, performance, and ease of use.
In this live presentation, security teams will learn more on how to better accelerate threat hunting and intelligence, anti-phishing, counter-fraud, brand protection, and incident response.
Join guest Tim Helming for a special edition of Indicators Over Cocktails focused on financial services.
In this presentation, we’ll demonstrate how Iris Investigate helps threat intelligence managers, IR teams, and SOC managers quickly identify malicious infrastructure to mitigate future attacks.
Join Tim Helming for a special edition of Indicators Over Cocktails focused on Iris Detect.
As one of the fundamental protocols of the Internet, DNS is involved in nearly every traffic flow into or out of an enterprise environment. Despite its ubiquity, DNS is not always recognized for the forensic potential it holds. This webinar shares concepts and techniques for analysis of DNS logs to identify potential risks.
In this live presentation, Daniel Schwalbe will use Farsight DNSDB Scout to show how to easily and quickly uncover previously unknown connections between seemingly unrelated assets.
In this month’s Indicators Over Cocktails, host Tim Helming showcases various data feeds from DomainTools.
In this demonstration, we share the latest updates and enhancements to Iris Investigate, so you can get the data you need faster.
Building off of previous discussions, Aaron Gee-Clough and Sean McNee will use the Disneyland team’s registered domains to demonstrate how to use data science techniques to save analysts time and find patterns that would otherwise be hard to identify.
Join guest Tim Helming for a special edition of Indicators Over Cocktails focused on financial services.
VP of Global Channels and Alliances for an overview of our recently-launched Partner Program, including a look at our new portal.
Join guest Tim Helming for Indicators Over Cocktails – special federal and local government edition.
Fascinating incident response (IR) and hunting use cases are unlocked when world-class passive DNS is added to one of the leading SIEM platforms – Microsoft Sentinel! Our latest integration of DomainTools Iris, Farsight DNSDB and Sentinel provides users the ability to develop insights around adversary assets.
Join DomainTools as we discuss several strategies to hunt for bad domains leveraging cutting edge tools from modern machine learning and DomainTools Iris Detect.
DomainTools and Torq will demonstrate how easy it is to stay ahead of threats using Iris Detect and the no-code automation of Torq.
Join guest Tim Helming for Indicators Over Cocktails – special healthcare edition.
Join Tim Helming for a special edition of Indicators Over Cocktails focused on retail institutions.
Join Dan Nunes and Tim Helming for a look at the latest enhancements to the latest DomainTools App for Splunk, and some key use cases to help enhance your security operations.
Join Tim Helming for a special edition of Indicators Over Cocktails focused on energy and critical infrastructure sectors.
Join DomainTools and ThreatBlockr to understand more on finding threats faster and proactively blocking threats before they compromise your networks.
Join us to dissect a recent ransomware campaign and learn how to leverage DomainTools Risk Score and DNS intelligence data with the CrowdStrike Falcon platform to accelerate IOC assessment and expedite containment and remediation actions without losi
Join Tim Helming for a special edition of Indicators Over Cocktails focused on government entities.
Join guest Tim Helming for a special edition of Indicators Over Cocktails focused on financial services.
Join Ultimate Windows Security and DomainTools to discuss the retirement of Alexa.com, its implications, and possible options for replacement.
In this webinar, join Director of Sales Engineering, Taylor Wilkes-Pierce to discuss how to separate signal from noise and to automate complex actions and investigations with world class domain and DNS data.
Join Kevin Libby for a discussion on illicit actor toolsets, malware sets, and how DomainTools data and components can help enhance security operations.
Join Tim Helming for a special edition of Indicators Over Cocktails focused on healthcare organizations.
DomainTools is excited to debut Iris Detect, the world’s fastest and broadest spoof domain discovery and tracking technology. In this webinar, Grant Cole and Tim Helming will give an overview, demonstration, and question and answer session.
Join Tim Helming for a special edition of Indicators Over Cocktails focused on retail institutions.
Learn how DomainTools and Maltego have simplified cyber investigations and informed better decisions by surfacing the most relevant data points for pivoting.
Join Ultimate Windows Security and DomainTools to learn how to map and identify phishing attacks so you can more effectively defend your organization and customers.
Join guest Taylor Wilkes-Pierce for a special edition of Indicators Over Cocktails focused on financial services.
Join DomainTools CEO Tim Chen and Farsight Security founder Dr. Paul Vixie for a fireside chat to discuss powerhouses in domain and DNS intelligence joining forces to make the internet a safer place.
Join SANS and DomainTools as they walk through how popular malware families set up their infrastructure to make attacks successful and how your organization can detect adversary infrastructure before it happens.
Join Dan Nunes and Tim Helming for a look at the latest enhancements to the DomainTools App for Splunk, and some key use cases to help enhance your security operations.
This year’s SANS Threat Hunting Survey examined the significance of threat hunting during changing economic conditions.
Join Ultimate Windows Security and Tim Helming to learn how you can expose an attacker’s entire infrastructure for one or more campaigns by leveraging their wealth of Passive DNS data gleaned from thousands of points on the Internet.
Join Tim Helming for a recurring series of fun, informal demonstrations of DomainTools products and features, with a different featured beverage each episode.
Join ThreatConnect and DomainTools for a discussion of how The DomainTools Iris Investigative platform coupled with ThreatConnect’s Threat Intelligence Platform (TIP), empowers organizations to effectively manage the flood of data.
Join DomainTools and Dark Reading to learn the details of how SOAR works, how it can enhance your defenses, and staffing and skills considerations to implement your SOAR strategy.
Join Tim Helming for a special edition of the indicators over cocktails series where he will demonstrate how DomainTools data feeds can help you harden your security defenses and quickly put indicators in context.
Join John Pescatore and DomainTools for a deep dive into the SANS 2021 Top New Attacks and Threat Report.
Join Bandura Cyber and DomainTools to learn how the DomainTools IP Hotlist empowers network defenders to proactively deter threats to their networks or gain better insights on IP addresses that appear in alerts.
Join Ultimate Windows Security to learn how the infrastructure that attackers set up prior to launching certain advanced attacks against your organization can give you the upper hand.
Join Tim Helming for a recurring series of fun, informal demonstrations of DomainTools products and features, with a different featured beverage each episode.
Join Chad Anderson and Brian Kime to dive into frameworks to evaluate the maturity of your organization’s threat intelligence architecture and identify opportunities to get your security organization 80% of the way there at 20% of the cost.
Join Farsight Security and DomainTools to learn how to build intelligence around possible malicious activity in your organization.
Join SANS author, instructor, and analyst Ismael Valenzuela for a panel discussion about the skills a security analysts must master.
Learn how to use DomainTools intelligence as a catalyst to quickly assess risk and track infrastructure surrounding a monitored domain to discover new and identify related domains to take timely action.
Join DomainTools Senior Security Researcher, Joe Slowik, and Black Hat to discuss the evolution of ransomware and trade craft threat actors employed across Europe in 2020.
Join Ultimate Windows Security and DomainTools to learn how to detect stealthy C&C traffic and strategies to leverage attacker’s dependence on Internet IP addresses and domain names.
Join Security Evangelist, Tim Helming, to dive deeper into the survey results and demonstrate how threat hunting can help maximize opportunities to detect future supply chain incidents.
Join Tim Helming, John “Turbo” Conwell, and John Pescatore, Director of Emerging Security Trends at SANS, as they discuss the benefits of incorporating SOAR into your organization’s security operations.
Learn how DomainTools and Maltego have simplified cyber investigations and informed better decisions by surfacing the most relevant data points for pivoting.
Join the DomainTools Research team and moderator Tim Helming for a discussion about hunting for evidence of the SUNBURST attack and how to apply these takeaways to future intrusions.
Join us to see how DomainTools drives rapid risk identification within the CrowdStrike Falcon platform by profiling adversaries, providing predictive context, and reducing swivel-chair activities.
Join SANS instructor and CTI specialist Robert M. Lee and a panel of industry experts as they dive into the results of the SANS 2021 CTI Survey and explore major themes, trends, and improvements in CTI.
Join Ultimate Windows Security and DomainTools to explore the SUNBURST incident and learn how these attackers compromised the SolarWinds network with an analysis using the Iris investigation platform.
This webcast digs more deeply into the results of the SANS 2020 Threat Hunting Survey. Join survey authors and subject matter experts for a panel discussion of this year’s findings.
Join subject matter experts including our CTO, Principal Data Scientist, Senior Security Researcher, and VP of Product for a round-table discussion on their information security predictions for 2021.
Learn how you can use real world attacks to create repeatable processes, rapidly investigate threat actor infrastructure, and create profiles to move left in attack detection.
Learn how to harness the power of automation, use open source tools and data sources to build Jupyter Notebook playbooks, and effectively collaborate with team members.
Join Splunk and DomainTools to learn how the DomainTools App for Splunk offers enhanced capabilities, performance, and user experience.
Join guest speaker Brian Kime, senior analyst at Forrester, to learn how to maximize the value from your threat intelligence, demonstrate its relevance, and reveal its ROI.
Join Ultimate Windows Security and DomainTools to learn how to explore malicious infrastructure to unearth activities of the group behind Avaddon ransomware.
Join our panel for a candid discussion about their 2021 priorities, how to introduce new tools and technologies in budget-constrained environments, and how to navigate your own career progression in a time of unprecedented change.
In this webcast, learn what kinds of attacks are possible by spoofing Wi-Fi beacons and a scheme to protect Wi-Fi beacons.
Join DomainTools Senior Product Manager of Product Integrations, Sourin Paul, to learn how the DomainTools App for Elastic can maximize your SecOps.
Join ThreatConnect and DomainTools to learn how network defenders and incident responders can effectively and efficiently protect their own organizations.
Join SANS and DomainTools to learn how to develop a CTI program that will make your team more efficient, effective, and aligned.
Explore critical indicators and examine 3 different threat hunting scenarios where you can use domain name threat indicators to make faster decisions and build repeatable workflows that save time and protect your users.
Join a guest speaker from IDC and DomainTools to learn how to address common challenges for security teams.
In this webinar we will dive into the details of SMBGhost and show how to predict an attacker’s next move.
Learn how to leverage the capabilities of our rich Iris and PhishEye data sets with Splunk to provide better visibility and context into your network traffic, gain event enrichment-at-scale, and garner proactive risk scoring with selective targeting.
Join DomainTools VP of Product, Jackie Abrams and Principal Data Scientist John “Turbo” Conwell to learn how Domain Hotlist equips security professionals to proactively guard against emerging, relevant threats.
In this Dark Reading webinar, experts discuss methods for testing your security’s mettle by thinking like your adversary. Learn how your organization can set up defenses & predict attackers.
This webcast takes a deeper dive into the results of the SANS 2020 Automation and Integration Survey. The survey outlined what automation activities have been successful and how to set up automation activities to achieve meaningful results.
Join SANS instructors Heather Mahalik, Ed Skoudis and Johannes Ullrich present their analysis of the new attack techniques currently in use that may affect you.
Join DomainTools and Bandura Cyber to learn how customers are making threat intelligence actionable by employing predictive domain risk scoring, blocking known bad traffic before it hits their network, and taking fast and precise action.
The cybersecurity world is beginning to find practical ways to use machine learning (ML) for good and for bad, for offense and for defense and on both sides of the red/blue and safe/block cybersecurity divides.
Join The DomainTools Security Research Team to walk through the process of identifying a nefarious domain, mapping connected infrastructure, and reverse-engineering a ransomware attack.
Join us to learn best practices to get ahead of malware, how threat intelligence can be applied in proactive threat detection practices, and how to leverage DomainTools Iris in your proactive threat hunting tactics.
From the novice cyber criminals to sophisticated actors, understanding why and how attackers target systems is critical to defense. Sometimes, though, there’s simply not enough time to analyze all the data available.
Join us to learn more about the features that the DomainTools App for Splunk Phantom supports so that organizations are able to leverage this integration for purpose-built work with the Iris Investigate API.
Join us to learn how to understand attacker motivations, identify prime targets within your organizations, and most effectively defend your organization’s most critical and valued assets and access.
This webcast takes a deeper dive into the results of the SANS 2020 CTI Survey. SANS instructor and CTI specialist Robert M. Lee will moderate a panel as they explore major themes developed during the survey.
Join Ultimate Windows Security and DomainTools to learn how to determine whether or not an IOC is a and use IOCs to expose the full depth and breadth of an attack targeted against you.
DomainTools is excited to debut Iris Detect, the world’s fastest and broadest spoof domain discovery and tracking technology. In this webinar, Grant Cole and Tim Helming will give an overview, demonstration, and question and answer session.
Join Philipp Dowling from Maltego and Taylor Wilkes-Pierce from DomainTools to learn how DomainTools and Maltego can be combined to expedite cyber investigations by extending crucial enrichment data.
Join Sourin Paul, Senior Product Integrations Manager at DomainTools, to see how combining the power of Demisto Enterprise and DomainTools Iris Investigate API provides better quality intelligence, improved operational efficiency, and faster incident.
Join us as we illustrate repeatable investigative pathways and illustrate how to leverage available data to strengthen your security posture without breaking the bank.
Join subject matter experts from DomainTools including our Senior Security Engineer, Senior Data Scientist, and more for a round-table discussion on their information security predictions for 2020.
In this installment of my Anatomy of a Hack series, I’ll show you how DNS hijacking works and why Sea Turtle has been so successful.
Join us to see how combining the power of IBM Resilient and DomainTools DNS infrastructure intelligence, can remediate incidents effectively.
This webcast digs more deeply into the results of the SANS 2019 Threat Hunting Survey. Survey authors Rob Lee and Robert M. Lee will discuss key themes that emerged during their analysis of survey results, joined by a panel of experts.
There’s no question that defense has gotten better when it comes to identifying threats early on in an attack. Companies still struggle beyond traditional attack avenues and have a difficult path into understanding how to progress when it comes to it.
Learn how to leverage the capabilities of our rich Iris and PhishEye data sets with Splunk to provide better visibility and context into your network traffic, gain event enrichment-at-scale, and garner proactive risk scoring with selective targeting.
IT and security experts Tarik Saleh of DomainTools and Aaron Goldberg of CBS Interactive will discuss tips and best practices for investigating breaches and getting results quickly.
Join Mike Jones, VP of Product and Taylor Wilkes-Pierce, Senior Sales Engineer to learn how these enhancements can help you level-up your investigative capabilities.
In this webinar, we will provide an overview of the role DNS and domain names play in today’s attack scenarios and explore proven risk factors for predicting the threat potential of a domain name that comes across your radar.
Join DomainTools and IBM in this webinar to learn how QRadar customers can leverage the threat hunting dashboard, bulk enrich domains for use in log searches, creation of offenses, or custom AQL rules, and proactively monitor malicious domains.
In this webinar, join SANS Analyst, Dave Shackleford and Senior Data Scientist, Sean McNee for an introduction to AI and ML, as well as how to identify technologies that actually use ML, and tips for harnessing the power of ML in Incident Response.
This webcast takes a deeper dive into the results of the SANS 2019 Incident Response (IR) Survey.
Join Thinus Prinsloo from Maltego and Taylor Wilkes-Pierce from DomainTools to learn how DomainTools and Maltego can be combined to expedite cyber investigations by extending crucial enrichment data.
Join ESG Senior Principal Analyst, Jon Oltsik, and DomainTools Senior Security Advisor, Corin Imai to learn how to use people, processes, and technology to enhance threat intelligence programs.
Join DomainTools and Security Weekly to explore areas where blue teams can identify false positives, methods of validating alerts, and real world applications of these examples.
Join Senior Sales Engineer, Taylor Wilkes-Pierce, and Senior Integrations Solutions Engineer, Josh Rice, to learn how to not only help separate signals from noise, but to automate complex actions and investigations by using Splunk>Phantom’s playbooks.
Join Randy Franklin Smith and Sr. Data Scientist, John (Turbo) Conwell, to learn about the difference between AI and machine learning, how they’re being applied in infosec right now, and identify technologies that effectively use machine learning.
Join Director of Product Management to learn how DomainTools Iris new features can help you level-up your adversary infrastructure intelligence capabilities.
Join Sourin Paul of DomainTools and Joe Gehrke of Anomali to learn how the SOC and CSIRT can leverage DomainTools data in Anomali Threatstream to correlate with additional datasets and export into existing security systems or ticketing systems, autom
Join DomainTools Senior Security Engineer, Tarik Saleh, and SANS instructor, Robert M. Lee, to explore areas where blue teams can identify false positives, methods of validating alerts, and real world applications of these examples.
Join SANS instructors Heather Mahalik, Ed Skoudis, and Johannes Ullrich, to learn about new attack techniques currently in use and their projections for future exploits.
Join Director of Product Integrations, Mark Kendrick, to learn more about new features that DomainTools has built into Splunk>Phantom so that organizations are able to leverage this integration for purpose-built work with the Iris Investigate API.
Join Larry Ponemon and DomainTools Senior Security Advisor, Corin Imai, to better understand how companies are addressing the problem of attracting and retaining IT security practitioners and the impact automation and AI will have on staffing and sec.
Join Randy Franklin-Smith and Security Researcher Emily Hacker to learn how Emotet works, what you can do to detect and defend against it, and how DomainTools data set can support tracking malicious campaigns.
In this webinar, the presenters will demonstrate a real-world DNS forensic investigation. Starting with a single IOC (indicator of compromise), they will step through how to pivot through domain infrastructure to build intelligence of associated mali