# Whisper Intelligence use cases, by domain

*Source: https://www.whisper.security/products/intelligence/use-cases*

---

- [Threat investigation & SOC](https://www.whisper.security/products/intelligence/use-cases/threat-investigation): Triage an indicator, map the adversary infrastructure around it, and trace a blast radius — every pivot on one pre-joined graph, no swivel-chairing across ten consoles.
- [Attack surface & external recon](https://www.whisper.security/products/intelligence/use-cases/attack-surface-recon): Inventory an org footprint, de-cloak origins behind a CDN, and surface shadow IT — from passive data, with no packets sent and no intent leaked.
- [Brand protection & anti-phishing](https://www.whisper.security/products/intelligence/use-cases/brand-protection): Catch live lookalike domains, tell a parked squat from one wired into phishing infrastructure, and build a takedown evidence package — in one pass.
- [BGP, routing & network security](https://www.whisper.security/products/intelligence/use-cases/network-routing): Detect MOAS hijacks, audit RPKI coverage, and profile an ASN — routing anomaly and threat signal landing on the same query.
- [DNS & email security](https://www.whisper.security/products/intelligence/use-cases/dns-email-security): Grade SPF, DMARC, DNSSEC, and mail posture crossed with the live infrastructure behind them — and catch nameserver drift before it becomes a hijack.
- [Infrastructure, supply chain & compliance](https://www.whisper.security/products/intelligence/use-cases/infrastructure-supply-chain): Map dependency and concentration risk down to datacenters, IXPs, and submarine cables — the physical-layer evidence NIS2, DORA, and sanctions screening ask for.
- [Research & OSINT](https://www.whisper.security/products/intelligence/use-cases/research-osint): Study how the internet is wired in a region or for an org, replay it as it looked at a point in time, and build attribution — RIR, BGP, DNS, and geo joined at last.