CofenseIntelligenceV2

Use the Cofense Intelligence integration to check the reputation of domains, URLs, IP addresses, file hashes, and email addresses.

Category

Data Enrichment & Threat Intelligence

Pack

CofenseIntelligenceV2

Configuration parameters

• url — Server URL (required)
• credentials — Token Name (required)
• integration_reliability — Source Reliability
• ip_threshold — IP Threshold
• file_threshold — File Threshold
• url_threshold — URL Threshold
• email_threshold — Email Threshold
• domain_threshold — Domain Threshold
• days_back — Time limit for collecting data
• scoreMapping — Score Mapping
• createRelationship — Create relationships
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (7)

• cofense-search — Retrieves a specific threat or a list of threats based on the filter values provided in the command arguments.
• cofense-threat-report-get — Downloads threat report provided by cofense intelligence of an indicator for the given unique report id.
• domain — Checks the reputation of the domain.
• email — Checks the reputation of an email address.
• file — Checks the reputation of a file hash.
• ip — Checks the reputation of an IP address.
• url — Checks the reputation of a URL.