Skip to main content
Cofense Triage v2 app icon

Cofense Triage v2

This app supports actions that enable the security teams to analyze and respond to phishing fasterBuilt by srv-stage-community
soar product badge
Default Version 1.0.3

September 17, 2021

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9

Rating
0
(0)

Log in to rate this app

Support
Not Supported
Ranking

#11 in Information

This app supports actions that enable the security teams to analyze and respond to phishing faster

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration
  • get reports: Retrieve reports from the Cofense Triage Platform filtered based on the provided parameters
  • get report: Retrieve a report with the provided ID from the Cofense Triage Platform
  • get email: Downloads the raw email for the report that matches the specified report ID
  • get categories: Retrieve categories from the Cofense Triage Platform filtered based on the provided parameters
  • get responses: Retrieve responses from the Cofense Triage Platform. This action is supported for Cofense Triage with version older than 1.23
  • create response: Create a response. This action is supported for Cofense Triage with version older than 1.23
  • categorize report: Categorize a report into the provided category
  • get threat indicators: Retrieve threat indicators from the Cofense Triage Platform filtered based on the provided parameters
  • create threat indicator: Create a threat indicator with the provided parameters
  • get reporters: Retrieve reporters from the Cofense Triage Platform filtered based on the provided parameters
  • get reporter: Retrieve a reporter from the Cofense Triage Platform for the provided reporter ID
  • get urls: Retrieve URLs from the Cofense Triage Platform filtered based on the provided parameters
  • get url: Retrieve a URL from the Cofense Triage Platform for the provided URL ID
  • get comments: Retrieve comments from the Cofense Triage Platform filtered based on the provided parameters
  • get comment: Retrieve a comment from the Cofense Triage Platform for the provided comment ID
  • get rules: Retrieve rules from the Cofense Triage Platform filtered based on the provided parameters
  • get rule: Retrieve a rule from the Cofense Triage Platform for the provided rule ID
  • get integration submissions: Retrieve integration submissions from the Cofense Triage Platform filtered based on the provided parameters
  • on poll: Action handler for the on poll ingest functionality