Cisco Umbrella Investigate API and Console - subscription license - 1 license

Cisco Umbrella Investigate provides access to threat intelligence about domains, IPs, ASNs, and file hashes in two main ways.

Investigate Console: use web-based console to query and interactively pivot on different data points during incident investigations and threat research.

Investigate API: use API to enrich data in your SIEM, threat intelligence platform, or incident workflow, so you can quickly surface high impact security incidents and add more context for security analysts and incident responders.