 The data is sourced from the DNS requests OpenDNS receives, plus the BGP routing tables that are managed by OpenDNS's network operations center.OpenDNS introduced the Investigate feature to Umbrella in November 2013.It allows security teams to compare local to global traffic to help determine the intent of an attack, and help incident response teams prioritize events.