Cofense Intelligence Deprecated

Deprecated. Use Cofense Intelligence v2 instead. Use the Cofense Intelligence integration to check the reputation of URLs, IP addresses, file hashes, and email addresses.

Data Enrichment & Threat Intelligence · Cofense Intelligence (Deprecated)

Configuration parameters

  • url — Server URL (e.g., https://www.threathq.com/apiv1) (required)
  • credentials — API username (required)
  • integrationReliability — Source Reliability (required)
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)
  • urlThreshold — URL Threshold (None, Minor, Moderate, or Major). Minimum severity to consider the URL malicious
  • fileThreshold — File Threshold (None, Minor, Moderate, or Major). Minimum severity to consider the file malicious
  • ipThreshold — IP Threshold (None, Minor, Moderate, or Major). Minimum severity to consider the IP malicious
  • emailThreshold — Email Threshold (None, Minor, Moderate, or Major). Minimum severity to consider the email malicious

Commands (5)

  • cofense-search

    Searches for extracted strings identified within malware campaigns.

  • email

    Checks the reputation of an email address.

  • file

    Checks the reputation of a file hash.

  • ip

    Checks the reputation of an IP address.

  • url

    Checks the reputation of a URL.