Skip to main content

PhishLabs - Whitelist false positives

Whitelists indicators from PhishLabs that were classified as false positives, according to a defined period of time.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • Builtin

Scripts#

  • PhishLabsPopulateIndicators

Commands#

  • closeInvestigation

Playbook Inputs#


NameDescriptionDefault ValueRequired
SinceThe whitelist indicators within this duration (from now).1hOptional

Playbook Outputs#


There are no outputs for this playbook.

Playbook Image#


PhishLabsWhitelistIndicators