Releases: splunk-soar-connectors/domaintoolsiris
Releases · splunk-soar-connectors/domaintoolsiris
1.5.1
1.5.0
- Added
on_poll
functionality for monitoring playbooks. - Added 2 new asset configuration parameter.
- Added a custom list template named "domaintools_scheduled_playbooks.csv" for monitoring functionality when enabling
on_poll
. - Updated python libraries
1.4.1
- All Iris Investigate and Iris Enrich queries now support batch lookups of up to 100 comma-separated domain inputs
- Added support for additional Iris fields: “first seen”, “server type”, and “website title”
- Pivot action adds support for additional operators: “create date within”, “first seen within”, and “first seen since”
- Added pagination on pivot responses (returns up to 5000 domains, sorted by highest risk)
- “Lookup Domain” action displays and adds outbound links to pivot in Iris Investigate when a domain has up to 500 connected domains on a data point
- Added support for proxies
- Minor UI improvements
- Updated python libraries
1.3.0
- Hi Splunk .conf22 attendees!
- New “enrich domain” action allows for higher volume automated domain lookups against the Iris Enrich API endpoint
- Handles parsing of fully qualified domain names (FQDNs) or full URLs using tldextract library
- Renames “whois” action to “lookup” to be more consistent with Splunk SOAR terminology
- Rebuilt significant portions of the app on top of the DomainTools Python API wrapper
1.2.3
- Updated Branding of Iris To Iris Investigate []
1.2.2
- Fixed Github playbook repo link
1.2.1
- add contributors
- minor changes to comply with new Splunk Soar automated code checks