PhishLabs

Details
Content
Dependencies
Version History

IOC information from PhishLabs.

Automations

Name	Description
PhishLabsPopulateIndicators	Populate indicators by the PhishLabs IOC global feed. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.10/Cortex-XSOAR-Administrator-Guide/Automations

Integrations

Name	Description
PhishLabs IOC DRP	Retrieves Digital Risk cases Protection from PhishLabs.
PhishLabs IOC	Get indicators of compromise from PhishLabs.
PhishLabs IOC EIR	Get Email Incident Reports from PhishLabs.

Playbooks

Name	Description
PhishLabs - Populate Indicators	This playbook can be used in a job to populate indicators from PhishLabs, according to a defined period of time.
PhishLabs - Whitelist false positives	This playbook can be used in a job to add to the allow list indicators from PhishLabs that were classified as false positives, according to a defined period of time.

Automations

Name	Description
PhishLabsPopulateIndicators	Populate indicators by the PhishLabs IOC global feed. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.10/Cortex-XSOAR-Administrator-Guide/Automations

Integrations

Name	Description
PhishLabs IOC	Get indicators of compromise from PhishLabs.
PhishLabs IOC EIR	Get Email Incident Reports from PhishLabs.
PhishLabs IOC DRP	Retrieves Digital Risk cases Protection from PhishLabs.

Playbooks

Name	Description
PhishLabs - Populate Indicators	This playbook can be used in a job to populate indicators from PhishLabs, according to a defined period of time.
PhishLabs - Whitelist false positives	This playbook can be used in a job to add to the allow list indicators from PhishLabs that were classified as false positives, according to a defined period of time.

Pack Name	Pack By
Base	By: Cortex XSOAR

Pack Name	Pack By
Base	By: Cortex XSOAR

1.1.22 - R1631266 (November 12, 2024)

Integrations

PhishLabs IOC

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 35282

Download

1.1.21 - R1047063 (May 27, 2024)

Integrations

PhishLabs IOC EIR

Fixed an issue where an unsupported data type was stored in the last run object of the fetch-incidents command, causing errors.
Updated the Docker image to: demisto/python3:3.10.14.92207.

Related pull requests:
- 33730

Download

1.1.20 - 938811 (April 7, 2024)

Scripts

PhishLabsPopulateIndicators

Updated the Docker image to: demisto/python3:3.10.14.91134.

Related pull requests:
- 33641
- 33516
- 33519
- 33515
- 33329
- 33314
- 33318
- 33328
- 33357
- 33344
- 33359
- 33458
- 33535
- 33534
- 33537
- 33552
- 33580
- 33553
- 33418
- 33583
- 33555
- 33556
- 33559
- 33560
- 33619
- 33591
- 33602
- 33600
- 33314
- 33318
- 33328
- 33357
- 33344
- 33359
- 33458

Download

1.1.19 - 798475 (February 1, 2024)

Integrations

PhishLabs IOC

Updated the Docker image to: demisto/python3:3.10.13.86272.

Related pull requests:
- 32445

Download

1.1.18 - 765039 (January 16, 2024)

Integrations

PhishLabs IOC EIR

Fixed an issue where the fetch-incidents command did not pull the correct amount of incidents.
Updated the Docker image to: demisto/python3:3.10.13.84405.

Related pull requests:
- 30069

Download

1.1.17 - R6950398 (November 21, 2023)

Integrations

PhishLabs IOC DRP

Updated the Docker image to: demisto/python3:3.10.13.78623.

Related pull requests:
- 30290

Download

1.1.16 - 6453502 (September 28, 2023)

Integrations

PhishLabs IOC EIR

Fixed an issue where the fetch-incidents command created duplicated incidents.

Related pull requests:
- 29206

Download

1.1.15 - R5866730 (July 25, 2023)

Integrations

PhishLabs IOC

Updated the Docker image to: demisto/python3:3.10.12.63474.

PhishLabs IOC DRP

Updated the Docker image to: demisto/python3:3.10.12.63474.

PhishLabs IOC EIR

Updated the Docker image to: demisto/python3:3.10.12.63474.

Related pull requests:
- 27954

Download

1.1.14 - R5692327 (July 5, 2023)

Scripts

PhishLabsPopulateIndicators

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

Related pull requests:
- 23716

Download

1.1.13 - R4718798 (March 1, 2023)

Integrations

PhishLabs IOC

Updated the Docker image to: demisto/python3:3.10.8.37753.

Related pull requests:
- 22481

Download

1.1.12 - 3427401 (August 9, 2022)

Integrations

PhishLabs IOC

Updated the Docker image to: demisto/python3:3.10.5.31928.

PhishLabs IOC EIR

Updated the Docker image to: demisto/python3:3.10.5.31928.

Related pull requests:
- 20387

Download

1.1.11 - 3143373 (June 23, 2022)

Integrations

PhishLabs IOC

Updated the Docker image to: demisto/python3:3.10.4.30607.

PhishLabs IOC EIR

Updated the Docker image to: demisto/python3:3.10.4.30607.

Related pull requests:
- 19703

Download

1.1.10 - 3056265 (June 8, 2022)

Integrations

PhishLabs IOC

Fixed a typing issue for requests.Response.

Related pull requests:
- 19444

Download

1.1.9 - 2953671 (May 20, 2022)

Integrations

PhishLabs IOC

Updated the Docker image to: demisto/python3:3.10.4.29342.

PhishLabs IOC EIR

Updated the Docker image to: demisto/python3:3.10.4.29342.

Download

1.1.8 - 2862717 (May 3, 2022)

Integrations

PhishLabs IOC

Updated the Docker image to: demisto/python3:3.10.4.28442.

PhishLabs IOC EIR

Updated the Docker image to: demisto/python3:3.10.4.28442.

Download

1.1.7 - 2583075 (March 15, 2022)

WARNING: This version is invalid. Please install a different version.

Integrations

PhishLabs IOC

Updated the Docker image to: demisto/python3:3.10.1.26972.

PhishLabs IOC EIR

Updated the Docker image to: demisto/python3:3.10.1.26972.

Related pull requests:
- 20109
- 18113

Download

1.1.6 - 2340785 (February 1, 2022)

Integrations

PhishLabs IOC

Updated the Docker image to: demisto/python3:3.10.1.25933.

PhishLabs IOC EIR

Updated the Docker image to: demisto/python3:3.10.1.25933.

Download

1.1.5 - 2226548 (January 9, 2022)

Integrations

PhishLabs IOC

Updated the Docker image to: demisto/python3:3.9.9.25564.

PhishLabs IOC EIR

Updated the Docker image to: demisto/python3:3.9.9.25564.

Download

1.1.4 - R2146019 (December 21, 2021)

Integrations

PhishLabs IOC DRP

Updated the Docker image to: demisto/python3:3.9.8.24399.

Download

1.1.3 - 2042391 (December 2, 2021)

Playbooks

PhishLabs - Whitelist false positives

Documentation fixes

Scripts

PhishLabsPopulateIndicators

Documentation fixes

Download

1.1.2 - 2020903 (November 28, 2021)

Scripts

PhishLabsPopulateIndicators

Added reference to required permissions in automation's description and README.

Download

1.1.1 - 1993458 (November 22, 2021)

Integrations

PhishLabs IOC

Updated the Docker image to: demisto/python3:3.9.8.24399.

PhishLabs IOC EIR

Updated the Docker image to: demisto/python3:3.9.8.24399.

Download

1.1.0 - 1882648 (November 2, 2021)

Scripts

PhishLabsPopulateIndicators

Breaking Change: DBotRole has been removed from this automation.
This change will affect any playbook that is dependent on, or runs, this automation.
This automation will now run using the default Limited User role, unless you explicitly change the permissions.
For more information, see the section about permissions here:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-2/cortex-xsoar-admin/playbooks/automations.html

Download

1.0.8 - 7772209 (September 25, 2021)

Scripts

PhishLabsPopulateIndicators

Updated the Docker image to: demisto/python3:3.9.7.24076.

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	November 9, 2020
Last Release	November 12, 2024

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.