Search
Microsoft Defender Threat Intelligence icon

Microsoft Defender Threat Intelligence

Microsoft passive DNS and TI graph

FreemiumWebAPI
Visit WebsiteDocs

Description

Microsoft Defender Threat Intelligence (formerly RiskIQ PassiveTotal) is a paid platform that maps the public internet — passive DNS, WHOIS, SSL, host components, cookies — into a graph of relationships used for IOC pivoting and actor tracking.

Inputs

Domain NameIP AddressHash (MD5/SHA)

Outputs

IOC (Indicator of Compromise)DNS RecordsSSL Certificate

Tags

IOC (Indicator of Compromise)

Tool Chain

Tools that can use this tool's outputs as inputs

Microsoft Defender Threat Intelligence
outputs
IOC (Indicator of Compromise)
inputs into
MISPFreeOpenCTIFreeYetiFreeMITRE ATT&CKFreeTheHiveFreemiumCortexFreemiumAbuseIPDBFreemiumAlienVault OTXFreePulsediveFreemiumThreatFoxFreeFeodo TrackerFreePhishTankFreeOpenPhishFreemiumCisco Talos IntelligenceFreeIBM X-Force ExchangeFreemiumCyberChefFreeGoogle Safe BrowsingFreemiumMalwarebytes LabsFreeOpenIOC EditorFreeCyberbroFree
Microsoft Defender Threat Intelligence
outputs
SSL Certificate
inputs into
abuse.ch SSL BlacklistFreeSectigo Certificate SearchFreemiumHunt.ioFreemiumSilent PushPaidValidinFreemiumNetlas.ioFreemium
Microsoft Defender Threat Intelligence
outputs
DNS Records
inputs into
SpiderFootFreeRecon-ngFreeDNSDumpsterFreeSublist3rFreeMaltegoFreemiumSubfinderFreeDNSReaperFree

Reviews

0.0 (0 reviews)