Skip to main content

Cofense Intelligence v2

Download With Dependencies

Cofense Intelligence allows users to search for threat intelligence reports based on domains, IPs, email address, file hashes, URLs and extracted strings.

Cofense Intelligence is reliable, human-verified phishing intelligence for actionable defense and strategic planning. Cofense researchers track emerging trends in phishing, research active threats, and supplement highest-priority investigations. Consumers of the intelligence are confident knowing indicators were validated by Cofense prior to platform ingestion. Cofense Intelligence machine-readable threat intelligence is ingested into platforms to support automation along with human-readable reports to make informed decisions against today’s phishing attacks.

What does this pack do?

  • Ingests human-verified phishing intelligence with associated malware families
  • Correlates global phishing campaigns and indicators
  • Creates relationship between indicators as part of the reputation commands
  • Checks the reputation with impact ratings (Major, Moderate, Minor, None) of:
    • URLs
    • Domains
    • IP addresses
    • File hashes
    • Email addresses
    • Infrastructure type
  • Searches for strings associated with phishing attacks
  • Searches for the malware family, malware file and malware subject associated with phishing attacks
  • Links to human-readable reports for an explanation as to why indicators are a risk to business

Cofense Intelligence is reliable, human-verified phishing intelligence for actionable defense and strategic planning. Cofense researchers track emerging trends in phishing, research active threats, and supplement highest-priority investigations. Consumers of the intelligence are confident knowing indicators were validated by Cofense prior to platform ingestion. Cofense Intelligence machine-readable threat intelligence is ingested into platforms to support automation along with human-readable reports to make informed decisions against today’s phishing attacks.

What does this pack do?

  • Ingests human-verified phishing intelligence with associated malware families
  • Correlates global phishing campaigns and indicators
  • Creates relationship between indicators as part of the reputation commands
  • Checks the reputation with impact ratings (Major, Moderate, Minor, None) of:
    • URLs
    • Domains
    • IP addresses
    • File hashes
    • Email addresses
    • Infrastructure type
  • Searches for strings associated with phishing attacks
  • Searches for the malware family, malware file and malware subject associated with phishing attacks
  • Links to human-readable reports for an explanation as to why indicators are a risk to business

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

CertificationRead more
Supported ByPartner
CreatedJuly 13, 2021
Last ReleaseJune 5, 2024
WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.