Changelog

Synapse-DomainTools Changelog

v1.0.0 - 2026-11-04

Automatic Migrations

  • Migrated existing DomainTools API credentials, Farsight API keys, Farsight URL and tag prefix settings to the new configuration manager. Global settings became the default configuration and per-user API keys became a configuration named synapse-domaintools:<useriden>. Credentials which could not be migrated are left in place and reported in the Cortex log.

  • Migrated inet:whois:rec:registrant values created by the Power-Up to inet:whois:rec:registrant:name.

Features and Enhancements

  • Added support for proxy, proxy authentication, and SSL verification settings on a per-configuration basis.

  • Added new configuration manager commands:

    • domaintools.config.add

    • domaintools.config.del

    • domaintools.config.list

    • domaintools.config.show

    • domaintools.config.update

    • domaintools.config.migrate

  • Added support for a configuration holding DomainTools API credentials, a Farsight API key, or both, with the Farsight URL set per configuration.

  • Added a configuration workflow to manage configurations via Optic. This requires Optic v2.135.0 to be deployed.

  • Added the power-ups.domaintools.admin permission to control access to configuration management and proxy overrides.

  • Added a --config argument to override the default configuration to the domaintools.iris.enrich, domaintools.iris.investigate, domaintools.iris.detect, domaintools.whois.history, domaintools.hosting.history, domaintools.pdns, domaintools.pdns.search and domaintools.limits commands.

  • Updated the commands to use a user’s own configuration in place of the default configuration. A user who had their own API key for only one of DomainTools or Farsight is reported in the Cortex log during the migration, and must use --config default or add the other API key to their configuration to use that service.

  • Removed the domaintools.setup.apikey, domaintools.setup.tagprefix, domaintools.farsight.setup.apikey and domaintools.farsight.setup.url commands. Use domaintools.config.add / domaintools.config.update instead.

  • Updated Power-Up to use $lib.auth.users.get() instead of $lib.user.

  • Updated the domaintools.iris.enrich and domaintools.iris.investigate commands to no longer create inet:whois:email nodes. Each WHOIS contact’s first valid email is set as its :email.

  • Updated WHOIS ingest to set inet:whois:rec:registrant:name instead of the deprecated inet:whois:rec:registrant property.

Bugfixes

  • Fixed an issue where the SSL certificate ingest in domaintools.iris.enrich and domaintools.iris.investigate could raise an error when a certificate subject contained a value of a form other than inet:url, inet:fqdn, inet:ipv4, or inet:email.

v0.8.0 - 2025-09-03

Features and Enhancements

  • Updated the domaintools.pdns command to support the --domain-regex argument for performing regular expression searches on the Farsight DNSDB API.

  • Added domaintools.pdns.search command for performing regular expression searches on the Farsight DNSDB API.

v0.7.0 - 2025-05-20

Features and Enhancements

  • Updated domaintools.iris.investigate to populate the it:exec:query:synuser property.

v0.6.1 - 2025-01-06

Bugfixes

  • Fixed typos in command help messages.

v0.6.0 - 2024-11-06

Features and Enhancements

  • Add node action to include subdomains when enriching nodes using PDNS data.

v0.5.0 - 2024-03-06

Features and Enhancements

  • Add domaintools.iris.detect command for retrieving new or watched domains.

v0.4.1 - 2024-02-20

Features and Enhancements

  • Update deprecated $lib.dict() usage to JSON style syntax.

v0.4.0 - 2024-02-14

Features and Enhancements

  • Include additional detail in the warning messages for unsuccessful HTTP requests to the DomainTools API.

v0.3.0 - 2024-02-06

NOTE: This release is considered Beta and may be subject to change.

Features and Enhancements

  • Add domaintools.farsight.setup.url command.

v0.2.3 - 2023-08-31

NOTE: This release is considered Beta and may be subject to change.

Bugfixes

  • Fix an issue where passing multiple domains to the --domain parameter of the domaintools.iris.investigate command caused the validation check to fail.

v0.2.2 - 2023-06-02

NOTE: This release is considered Beta and may be subject to change.

Bugfixes

  • Fix an issue where results with missing ASN values were not handled properly.

v0.2.1 - 2023-06-02

NOTE: This release is considered Beta and may be subject to change.

Bugfixes

  • Fix an issue where domaintools.iris.investigate queries which exceeded the maximum number of allowed results were not handled correctly.

v0.2.0 - 2023-04-12

NOTE: This release is considered Beta and may be subject to change.

Features and Enhancements

  • Additional validation for domaintools.iris.investigate and domaintools.iris.enrich command inputs.

v0.1.0 - 2023-03-16

NOTE: This release is considered Beta and may be subject to change.

Features and Enhancements

  • Initial beta release of the Synapse-DomainTools Power-Up