Farsight Security, a leader in DNS Intelligence, launched the integration of its flagship solution, DNSDB, with IBM Security QRadar Security Information and Event Management (SIEM) to provide critical contextual DNS information to increase the value of your threat data, helping advance cyberattack investigations.
The new application is freely available to the security community through IBM Security App Exchange, a marketplace where developers across the industry can share applications based on IBM Security technologies. As threats are evolving faster than ever, collaborative development amongst the security community will help organizations adapt quickly and speed innovation in the fight against cybercrime.
Bad actors can create, use, and discard domain names for malicious campaigns within minutes. Starting with a single suspicious domain or IP address, Farsight DNSDB integration for QRadar can automatically enhance these digital artifacts with other related DNS asset information to help identify the infrastructure used in cyberattacks to enable organizations to more quickly respond and protect against fast-moving online threats, ranging from phishing to nation-state attacks.
"IBM Security QRadar is a mature and respected platform for enterprise cybersecurity, and we are proud to offer our DNSDB solution to customers who are strongly invested in QRadar," said Paul Vixie, Farsight CEO. "We believe that objective observational services will be the key to turning the tide of cybercrime and related economic losses. Our integration with QRadar reinforces our mission to defend against a wide range of threat actors."
Farsight DNSDB, with more than 100 billion DNS records, is used by threat hunting and incident response teams of today’s leading government agencies, Fortune 500 corporations including financial, healthcare and manufacturing institutions, top technology firms, including leading cybersecurity companies as well as universities and other non-profits.