AWS Sagemaker

AWS Sagemaker - Demisto Phishing Email Classifier.

Data Enrichment & Threat Intelligence · AWS Sagemaker

Details

ID	`AWS Sagemaker`
Provider	Amazon
Category	Data Enrichment & Threat Intelligence
From Version	5.0.0
Docker Image	`demisto/boto3py3:1.0.0.10221838`
Supported Modules	Agentix XSIAM

README

AWS Sagemaker - Cortex XSOAR Phishing Email Classifier

Configure AWS Sagemaker in Cortex

Parameter	Required
AWS access key	True
AWS secret key	True
AWS Region code	False
Endpoint Name	True
Use system proxy settings	False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

predict-phishing

Classify input text (usually email content)

Base Command

predict-phishing

Input

Argument Name	Description	Required
inputText	The input text (usually email subject + body).	Optional

Context Output

Path	Type	Description
DBotPhishingPrediction.Label	string	The predicated label: malicious \ other
DBotPhishingPrediction.Probability	number	The predication probability (range 0-1)

Command Example

!predict-phishing inputText="Dear Info, Please confirm account password...", "Major Update: General Availability feedback..."

Configuration parameters

credentials — AWS access key
AWSAccessKey — AWS access key
AWSSecretKey — AWS secret key
AWSRegion — AWS Region code
EndpointName — Endpoint Name (required)
sts_regional_endpoint — AWS STS Regional Endpoints
proxy — Use system proxy settings

Commands (1)

predict-phishing
Classify input text (usually email content).

Source

AWSSagemaker.py AWSSagemaker.yml AWSSagemaker_description.md

Download History Raw

AWS Sagemaker - Cortex XSOAR Phishing Email Classifier