cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Who rated this post

L2 Linker

You will need to use an integration that returns the domain age. Look at "DomainTools Iris" which does that exactly. The integration also allow you to set a "young" domain threshold so anything created within that time will be marked as suspicious.

This is done using the "domain" command which is the generic command to enrich domains. That command is already used by the built-in playbook Domain Enrichment - Generic v2, so you can simply use that playbook with the integration for that use case

 

Shriki
Who rated this post