SecurityTrails
Enrich IP addresses with domains and infrastructure context from SecurityTrails.
Overview
SecurityTrails provides DNS, WHOIS, and infrastructure data that helps connect domains and IP addresses.
Malfors uses SecurityTrails to enrich IP addresses in your graph with domains found on the same IP.
This helps you pivot from infrastructure to hosted domains and decide which related assets need review.
Configure
- Create a SecurityTrails account and generate your API key.
- In Malfors, open Enrichments → SecurityTrails → Add Token.
- Paste your token into the field and save.
- SecurityTrails enrichments are now available.