Removed a non-existent service and removed fqdn since it isn't actually supported yet.

Author: ChuckWoodraska

analyzers/DomainToolsIris/DomainToolsIris_Investigate.json

@@ -4,8 +4,8 @@
   "author": "DomainTools",
   "url": "https://github.com/TheHive-Project/Cortex-Analyzers",
   "license": "AGPL-V3",
-  "description": "Use DomainTools Iris API to investigate a domain or fqdn",
-  "dataTypeList": ["domain","fqdn"],
+  "description": "Use DomainTools Iris API to investigate a domain.",
+  "dataTypeList": ["domain"],
   "command": "DomainToolsIris/domaintoolsiris_analyzer.py",
   "baseConfig": "DomainToolsIris",
   "config": {

analyzers/DomainToolsIris/domaintoolsiris_analyzer.py

@@ -240,17 +240,11 @@ def domaintools(self, data):
 
         APP_PARAMETERS = {"app_partner": "cortex", "app_name": "Iris", "app_version": 1}
 
-        if self.service == "investigate-domain" and self.data_type in [
-            "domain",
-            "fqdn",
-        ]:
-            response = api.iris_investigate(data, **APP_PARAMETERS).response()
-            if response["results_count"]:
-                response = self.format_single_domain(response.get("results")[0])
-        elif self.service == "threat-profile" and self.data_type in ["domain", "fqdn"]:
+        if self.service == "investigate-domain" and self.data_type in ["domain"]:
             response = api.iris_investigate(data, **APP_PARAMETERS).response()
             if response["results_count"]:
                 response = self.format_single_domain(response.get("results")[0])
+
         elif self.service == "pivot" and self.data_type in ["hash", "ip", "mail"]:
             iris_investigate_args_map = {
                 "ip": "ip",