ドメインカード
Domain Intelligence Cards (aka Domain Cards) provide an on-demand summary of
essential information related to a specific Domain or DNS Names, and are updated
in real time as Recorded Future collects new information. You can use Domain Cards
as a starting point when assessing whether observation of a given Domain in a
specific context is an Indicator of Compromise, and further can be used in security
control rules to block or detect incidents. Domain Cards are also pivot points
during investigations that start with another indicator, a malware tool, a vulnerability,
or a threat actor.
Descriptions of several common components of the Domain Card are available elsewhere, depending on your subscription type:
- Advanced ライセンスとコア ライセンスのユーザーは、インテリジェンス カードの概要を確認できます
- SecOps Intelligence ユーザーは、インテリジェンス カードの概要を確認できます
以下は、ドメインカードに固有の詳細です。
ドメインカード:ドメイン内の親ドメイン、兄弟、DNS名
Similar to the /24 Subnet summary shown in IP Address Cards, Domain Cards present a summary of related Domains and DNS names. For a DNS name within a domain, this summary section includes the parent Domain and sibling DNS names. For a Domain, this summary section includes DNS names within the Domain.
Intelligence Partner 拡張機能
拡張機能は、ドメインカードをインテリジェンスパートナーのコンテンツで強化する統合です。詳細については、ここをクリックしてください。