Skip to main content

Cofense Feed

Ingest human-verified phishing indicators from Cofense Intelligence. Cofense Intelligence is reliable, human-verified phishing intelligence for actionable defense and strategic planning. Cofense researchers track emerging trends in phishing, research active threats, and supplement highest-priority investigations.

Note: Support for this pack moved to the partner on October 1, 2021. Please contact them directly via the support link on the right.

Cofense Intelligence is reliable, human-verified phishing intelligence for actionable defense and strategic planning. Cofense researchers track emerging trends in phishing, research active threats, and supplement highest-priority investigations. Consumers of the intelligence are confident knowing indicators were validated by Cofense prior to platform ingestion. Cofense Intelligence machine-readable threat intelligence is ingested into platforms to support automation along with human-readable reports to make informed decisions against today’s phishing attacks.

What does this pack do?
  • Ingests human-verified phishing intelligence with associated malware families
  • Correlates global phishing campaigns and indicators
  • Checks the reputation with impact ratings (Major, Moderate, Minor, None) of:
    • URLs
    • Domains
    • IP addresses
    • Email addresses
      Searches for strings associated with phishing attacks
      Links to human-readable reports for an explanation as to why indicators are a risk to business

https://cofense.com/product-services/phishing-intelligence/

PUBLISHER

Cofense

INFO

CertificationRead more
Supported ByPartner
CreatedJuly 6, 2020
Last ReleaseOctober 12, 2021
WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.