Answer:
How does blocking work in Iris Detect?
When the Block action is selected, the domains are flagged as escalated in the API so that they are apparent in API calls. The date and time of the blocking action is added as well, and is queryable. The workflow is to use the GUI to triage domains and mark them for blocking, and then use the APIs to periodically (e.g. hourly) request for domains that have been blocked in the last hour – and the API returns that list. Users can also use APIs instead of the GUI to send escalations.
Still need help?
Contact Support
Support Categories
- Registrant Monitor
- Iris Enrich
- Iris Detect
- Farsight Security Acquisition
- Domain Risk Score
- PhishEye
- Iris Investigate
- Acquiring Domains
- Internet Fundamentals
- Dropping Names
- Screenshot History
- Reverse IP
- Domain Suggestions
- Reverse Whois
- Membership FAQ
- Domain Monitor
- DNS Tools
- Name Server Monitor
- Domain Report
- Whois
- Whois History
- Domain Search
- IP Monitor
- Hosting History
- Brand Monitor
- General Support
- Reverse Name Server
