PhishER | Marketplace

Details
Content
Dependencies
Version History

A pack for KnowBe4 PhishER integration

PhishER Identify and respond to email threats faster.
With automatic prioritization for emails, PhishER helps your InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

What does this pack do?

Gets all messages from PhishER
Creates incidents from messages
Allows filtering messages with specific Lucene query
Gets specific message by ID
Allows adding comment to specific message
Updates Category, Severity and Status of specific message
Creates and delete tags for specific message

What does this pack do?

Gets all messages from PhishER
Creates incidents from messages
Allows filtering messages with specific Lucene query
Gets specific message by ID
Allows adding comment to specific message
Updates Category, Severity and Status of specific message
Creates and delete tags for specific message

Classifiers

Name	Description
PhishER-mapper

Incident Fields

Name	Description
PhishER Severity	The message's severity
PhishER Pipeline Status	Pipeline Status
PhishER Subject	Subject of the message.
PhishER Attachments	A collection of attachments associated with this message.
PhishER Links	A collection of links that were found in the message.
PhishER Email From	Sender's email.
PhishER Category	The message's category
PhishER Created	Creation time of the message
PhishER Tags	A collection of tags associated with this message.
PhishER ID	Unique identifier for the message.
PhishER Action Status	Action status
PhishER Raw URL	URL where to download the raw message
PhishER ML Report	The PhishML report associated with this message.
PhishER Comments
PhishER Reported By	The person who reported the message.

Incident Types

Name	Description
PhishER

Integrations

Name	Description
PhishER (Partner Contribution)	KnowBE4 PhishER integration allows to pull events from PhishER system and do mutations.

Layouts

Name	Description
PhishER

Classifiers

Name	Description
PhishER-mapper

Incident Fields

Name	Description
PhishER Links	A collection of links that were found in the message.
PhishER Severity	The message's severity
PhishER Comments
PhishER ID	Unique identifier for the message.
PhishER Subject	Subject of the message.
PhishER Action Status	Action status
PhishER Attachments	A collection of attachments associated with this message.
PhishER Reported By	The person who reported the message.
PhishER Created	Creation time of the message
PhishER Pipeline Status	Pipeline Status
PhishER Tags	A collection of tags associated with this message.
PhishER Raw URL	URL where to download the raw message
PhishER ML Report	The PhishML report associated with this message.

Incident Types

Name	Description
PhishER

Integrations

Name	Description
PhishER (Partner Contribution)	KnowBE4 PhishER integration allows to pull events from PhishER system and do mutations.

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (1)

Pack Name	Pack By
Common Types	By: Cortex XSOAR

All level dependencies (2)

Pack Name	Pack By
Filters And Transformers	By: Cortex XSOAR
Base	By: Cortex XSOAR

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Partner
Created	October 7, 2021
Last Release	October 29, 2024

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.