Infoblox

Infoblox Legacy Data Connector enables forwarding of DNS, DHCP, and IPAM log data from Infoblox appliances to external security platforms. It provides the bridge between Infoblox core network services infrastructure and SIEM/XDR platforms for security monitoring of foundational network services. 

The connector delivers DNS query logs, DHCP lease events, and IPAM changes that are critical for security investigation. DNS logs reveal malicious domain communications and data exfiltration, DHCP logs provide IP-to-device mapping for forensics, and IPAM changes can indicate unauthorised network modifications.