IOC information from PhishLabs.
| Name | Description |
|---|---|
PhishLabsPopulateIndicators | Populate indicators by the PhishLabs IOC global feed. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
| Name | Description |
|---|---|
| PhishLabs - Whitelist false positives | This playbook can be used in a job to add to the allow list indicators from PhishLabs that were classified as false positives, according to a defined period of time. |
| PhishLabs - Populate Indicators | This playbook can be used in a job to populate indicators from PhishLabs, according to a defined period of time. |
| Name | Description |
|---|---|
| PhishLabs IOC | Get indicators of compromise from PhishLabs. |
| PhishLabs IOC DRP | Retrieves Digital Risk cases Protection from PhishLabs. |
| PhishLabs IOC EIR | Get Email Incident Reports from PhishLabs |
| Name | Description |
|---|---|
PhishLabsPopulateIndicators | Populate indicators by the PhishLabs IOC global feed. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
| Name | Description |
|---|---|
| PhishLabs - Whitelist false positives | This playbook can be used in a job to add to the allow list indicators from PhishLabs that were classified as false positives, according to a defined period of time. |
| PhishLabs - Populate Indicators | This playbook can be used in a job to populate indicators from PhishLabs, according to a defined period of time. |
| Name | Description |
|---|---|
| PhishLabs IOC | Get indicators of compromise from PhishLabs. |
| PhishLabs IOC DRP | Retrieves Digital Risk cases Protection from PhishLabs. |
| PhishLabs IOC EIR | Get Email Incident Reports from PhishLabs |
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Pack Name | Pack By |
|---|
| Pack Name | Pack By |
|---|
Cortex
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | November 9, 2020 | |
| Last Release | March 8, 2023 |
