Retrieves Digital Risk cases Protection from PhishLabs.
PhishLabs
- Details
- Content
- Dependencies
- Version History
IOC information from PhishLabs.
Integrations
| Name | Description |
|---|---|
| PhishLabs IOC DRP | |
| PhishLabs IOC EIR | Get Email Incident Reports from PhishLabs |
| PhishLabs IOC | Get indicators of compromise from PhishLabs. |
Automations
| Name | Description |
|---|---|
PhishLabsPopulateIndicators | Populate indicators by the PhishLabs IOC global feed. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
Playbooks
| Name | Description |
|---|---|
| PhishLabs - Whitelist false positives | This playbook can be used in a job to add to the allow list indicators from PhishLabs that were classified as false positives, according to a defined period of time. |
| PhishLabs - Populate Indicators | This playbook can be used in a job to populate indicators from PhishLabs, according to a defined period of time. |
Integrations
| Name | Description |
|---|---|
| PhishLabs IOC DRP | Retrieves Digital Risk cases Protection from PhishLabs. |
| PhishLabs IOC EIR | Get Email Incident Reports from PhishLabs |
| PhishLabs IOC | Get indicators of compromise from PhishLabs. |
Automations
| Name | Description |
|---|---|
PhishLabsPopulateIndicators | Populate indicators by the PhishLabs IOC global feed. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
Playbooks
| Name | Description |
|---|---|
| PhishLabs - Whitelist false positives | This playbook can be used in a job to add to the allow list indicators from PhishLabs that were classified as false positives, according to a defined period of time. |
| PhishLabs - Populate Indicators | This playbook can be used in a job to populate indicators from PhishLabs, according to a defined period of time. |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (0)
| Pack Name | Pack By |
|---|
1.1.9 - 2953671 (May 20, 2022)
Integrations
PhishLabs IOC
- Updated the Docker image to: demisto/python3:3.10.4.29342.
PhishLabs IOC EIR
- Updated the Docker image to: demisto/python3:3.10.4.29342.
1.1.8 - 2862717 (May 3, 2022)
Integrations
PhishLabs IOC
- Updated the Docker image to: demisto/python3:3.10.4.28442.
PhishLabs IOC EIR
- Updated the Docker image to: demisto/python3:3.10.4.28442.
1.1.7 - 2583075 (March 15, 2022)
1.1.6 - 2340785 (February 1, 2022)
Integrations
PhishLabs IOC
- Updated the Docker image to: demisto/python3:3.10.1.25933.
PhishLabs IOC EIR
- Updated the Docker image to: demisto/python3:3.10.1.25933.
1.1.5 - 2226548 (January 9, 2022)
Integrations
PhishLabs IOC
- Updated the Docker image to: demisto/python3:3.9.9.25564.
PhishLabs IOC EIR
- Updated the Docker image to: demisto/python3:3.9.9.25564.
1.1.4 - R2146019 (December 21, 2021)
Integrations
PhishLabs IOC DRP
- Updated the Docker image to: demisto/python3:3.9.8.24399.
1.1.3 - 2042391 (December 2, 2021)
Playbooks
PhishLabs - Whitelist false positives
- Documentation fixes
Scripts
PhishLabsPopulateIndicators
- Documentation fixes
1.1.2 - 2020903 (November 28, 2021)
Scripts
PhishLabsPopulateIndicators
- Added reference to required permissions in automation's description and README.
1.1.1 - 1993458 (November 22, 2021)
Integrations
PhishLabs IOC
- Updated the Docker image to: demisto/python3:3.9.8.24399.
PhishLabs IOC EIR
- Updated the Docker image to: demisto/python3:3.9.8.24399.
1.1.0 - 1882648 (November 2, 2021)
Scripts
PhishLabsPopulateIndicators
- Breaking Change: DBotRole has been removed from this automation.
This change will affect any playbook that is dependent on, or runs, this automation.
This automation will now run using the default Limited User role, unless you explicitly change the permissions.
For more information, see the section about permissions here:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-2/cortex-xsoar-admin/playbooks/automations.html
1.0.8 - 7772209 (September 25, 2021)
Scripts
PhishLabsPopulateIndicators
- Updated the Docker image to: demisto/python3:3.9.7.24076.
PUBLISHER
Cortex
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | November 9, 2020 | |
| Last Release | January 11, 2023 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
