PhishLabs IOC EIR

Get Email Incident Reports from PhishLabs.

Category

Data Enrichment & Threat Intelligence

Pack

PhishLabs

Configuration parameters

• url — Server URL (e.g. https://example.net) (required)
• credentials — User (required)
• integrationReliability — Source Reliability (required)
• isFetch — Fetch incidents
• incidentType — Incident type
• incidentFetchInterval — Incidents Fetch Interval
• fetchTime — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)
• fetchLimit — Fetch limit
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (2)

• phishlabs-ioc-eir-get-incident-by-id — Returns a single Incident based on the given ID.
• phishlabs-ioc-eir-get-incidents — Returns EIR incidents from PhishLabs-IOC EIR service. The default number of incidents returned is 25.