CofenseIntelligenceV2

Use the Cofense Intelligence integration to check the reputation of domains, URLs, IP addresses, file hashes, and email addresses.

Data Enrichment & Threat Intelligence · Cofense Intelligence v2

Configuration parameters

  • url — Server URL (required)
  • credentials — Token Name (required)
  • integration_reliability — Source Reliability
  • ip_threshold — IP Threshold
  • file_threshold — File Threshold
  • url_threshold — URL Threshold
  • email_threshold — Email Threshold
  • domain_threshold — Domain Threshold
  • days_back — Time limit for collecting data
  • scoreMapping — Score Mapping
  • createRelationship — Create relationships
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (7)

  • cofense-search

    Retrieves a specific threat or a list of threats based on the filter values provided in the command arguments.

  • cofense-threat-report-get

    Downloads threat report provided by cofense intelligence of an indicator for the given unique report id.

  • domain

    Checks the reputation of the domain.

  • email

    Checks the reputation of an email address.

  • file

    Checks the reputation of a file hash.

  • ip

    Checks the reputation of an IP address.

  • url

    Checks the reputation of a URL.