Retrieves Digital Risk cases Protection from PhishLabs.
PhishLabs
- Details
- Content
- Dependencies
- Version History
IOC information from PhishLabs.
Name | Description |
---|---|
PhishLabs IOC DRP | |
PhishLabs IOC EIR | Get Email Incident Reports from PhishLabs |
PhishLabs IOC | Get indicators of compromise from PhishLabs. |
Name | Description |
---|---|
PhishLabsPopulateIndicators | Populate indicators by the PhishLabs IOC global feed. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
Name | Description |
---|---|
PhishLabs - Whitelist false positives | This playbook can be used in a job to add to the allow list indicators from PhishLabs that were classified as false positives, according to a defined period of time. |
PhishLabs - Populate Indicators | This playbook can be used in a job to populate indicators from PhishLabs, according to a defined period of time. |
Name | Description |
---|---|
PhishLabs IOC DRP | Retrieves Digital Risk cases Protection from PhishLabs. |
PhishLabs IOC EIR | Get Email Incident Reports from PhishLabs |
PhishLabs IOC | Get indicators of compromise from PhishLabs. |
Name | Description |
---|---|
PhishLabsPopulateIndicators | Populate indicators by the PhishLabs IOC global feed. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
Name | Description |
---|---|
PhishLabs - Whitelist false positives | This playbook can be used in a job to add to the allow list indicators from PhishLabs that were classified as false positives, according to a defined period of time. |
PhishLabs - Populate Indicators | This playbook can be used in a job to populate indicators from PhishLabs, according to a defined period of time. |
Pack Name | Pack By |
---|---|
Base | By: Cortex XSOAR |
Pack Name | Pack By |
---|
Pack Name | Pack By |
---|
Integrations
PhishLabs IOC
- Updated the Docker image to: demisto/python3:3.10.4.29342.
PhishLabs IOC EIR
- Updated the Docker image to: demisto/python3:3.10.4.29342.
Integrations
PhishLabs IOC
- Updated the Docker image to: demisto/python3:3.10.4.28442.
PhishLabs IOC EIR
- Updated the Docker image to: demisto/python3:3.10.4.28442.
Integrations
PhishLabs IOC
- Updated the Docker image to: demisto/python3:3.10.1.25933.
PhishLabs IOC EIR
- Updated the Docker image to: demisto/python3:3.10.1.25933.
Integrations
PhishLabs IOC
- Updated the Docker image to: demisto/python3:3.9.9.25564.
PhishLabs IOC EIR
- Updated the Docker image to: demisto/python3:3.9.9.25564.
Integrations
PhishLabs IOC DRP
- Updated the Docker image to: demisto/python3:3.9.8.24399.
Playbooks
PhishLabs - Whitelist false positives
- Documentation fixes
Scripts
PhishLabsPopulateIndicators
- Documentation fixes
Scripts
PhishLabsPopulateIndicators
- Added reference to required permissions in automation's description and README.
Integrations
PhishLabs IOC
- Updated the Docker image to: demisto/python3:3.9.8.24399.
PhishLabs IOC EIR
- Updated the Docker image to: demisto/python3:3.9.8.24399.
Scripts
PhishLabsPopulateIndicators
- Breaking Change: DBotRole has been removed from this automation.
This change will affect any playbook that is dependent on, or runs, this automation.
This automation will now run using the default Limited User role, unless you explicitly change the permissions.
For more information, see the section about permissions here:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-2/cortex-xsoar-admin/playbooks/automations.html
Scripts
PhishLabsPopulateIndicators
- Updated the Docker image to: demisto/python3:3.9.7.24076.
PUBLISHER
Cortex
PLATFORMS
INFO
Certification | Certified | Read more |
Supported By | Cortex | |
Created | November 9, 2020 | |
Last Release | January 11, 2023 |
WORKS WITH THE FOLLOWING INTEGRATIONS:


