Whisper
Overview
Enrich IP, domain and AS observables with relationship context from the Whisper graph: DNS, BGP, WHOIS, threat-feed listings, lookalikes, and ASN/prefix infrastructure.
The Whisper graph is the internet's largest infrastructure graph — 7.39 billion nodes and 39 billion edges spanning DNS, BGP, WHOIS, GeoIP, web-link, email-infrastructure, and threat-intel data. This connector enriches OpenCTI observables (IPv4, IPv6, Domain-Name, Autonomous-System) with the relationship context Whisper has on them: resolving / linked / nameserver hostnames, announcing ASNs and prefixes, registrar and registered-organisation identities, country/city locations, threat-feed listings and threat scores, and LINKS_TO web-graph context.
Domain-Name enrichment is deterministic and category-targeted: A/AAAA records, CNAME, NS, MX, registrar, previous registrar, registered org, WHOIS email, plus capped pivots (nameserver-for / mail-server-for / subdomains / inbound CNAMEs / inbound+outbound web links) and analyst Notes for SPF policy, WHOIS phone, threat-feed evidence, and registered lookalike domains.