Agari Phishing Defense (v1.1.28)
Use the Agari Phishing Defense integration to retrieve Policy Events as Incidents, retrieve messages and remediate suspected messages.
- Author
- Agari
- Support
- partner
- URL
- https://www.agari.com/support/
- Categories
Incident fields (29)
- APD Admin Recipients
- APD Alert Definition Name
- APD Attack Types
- APD Created At
- APD Enforcement Action
- APD Global Message ID
- APD Internal Message ID
- APD Message Authentication Results
- APD Message Authenticity Score
- APD Message DKIM D Tag
- APD Message Date
- APD Message Domain Reputation
- APD Message From
- APD Message From Domain
- APD Message Mail From
- APD Message PTR Name
- APD Message Reply To
- APD Message Reputation
- APD Message Risk Reason
- APD Message Sender IP Address
- APD Message Subject
- APD Message To
- APD Message Trust Score
- APD Notified Original Recipients
- APD Policy Action
- APD Policy Enabled
- APD Policy Event ID
- APD Summary
- APD Updated At
Integrations (1)
- Agari Phishing Defense
Layouts (1)
- Agari Phishing Defense Policy Event
Playbooks (3)
- Agari Message Remediation - Agari Phishing Defense
- Remediate Message - Agari Phishing Defense
- Retrieve Email Data - Agari Phishing Defense
README
Agari Phishing Defense (APD) stops phishing, BEC, and other identity deception attacks that trick employees into harming your business. APD prevents threats from reaching employee inboxes by scoring every message flowing into and within the organization to defend against these low-volume, highly-targeted identity deception-based attacks.
This Agari Phishing Defense content pack contains an APD integration that provides customers with a granular level of visibility into email threats and the ability to orchestrate protection processes and safeguard infrastructure from within Cortex XSOAR. The Agari Phishing Defense playbook enables gathering policy events and associated messages from APD, enriching data using Cortex XSOAR built-in sub-playbooks, and performing remediation.
What does this pack do?
- The playbooks included in this pack help you by providing a consolidated view of all security incidents that saves time and keeps your email security in check.
- Imports policy events and corresponding message metadata from Agari Phishing Defense.
- Does email enrichment (IP, domain, URL, attachment, email address, etc.)
- Does email authenticity check
- Does remediation if malicious
For more information, visit (https://www.agari.com/email-security-blog/integration-cortex-xsoar/)