→ Automate domain enrichment to instantly gather critical domain intelligence by triggering Iris Enrich operations when suspicious domain names are detected in security alerts → Automatically investigate IP addresses by executing Iris Investigate API calls to provide contextual insights for incident response and threat hunting → Streamline domain monitoring by automating retrieval and management of ignored, watched, and newly discovered domains, and uploading domains for blocking via Iris Detect APIs