Cofense Feed (v1.1.11)

Ingest human-verified phishing indicators from Cofense Intelligence. Cofense Intelligence is reliable, human-verified phishing intelligence for actionable defense and strategic planning. Cofense researchers track emerging trends in phishing, research active threats, and supplement highest-priority investigations.

Author: Cofense
Support: partner
URL: https://cofense.com/contact-support/
Categories: Data Enrichment & Threat Intelligence

Indicator fields (16)

Cofense Feed ASN Organization
Cofense Feed Continent Code
Cofense Feed Continent Name
Cofense Feed Entered Date
Cofense Feed File Name
Cofense Feed ISP
Cofense Feed Infrastructure Type Description
Cofense Feed Lookup On
Cofense Feed Postal Code
Cofense Feed Role Description
Cofense Feed SHA224
Cofense Feed SHA384
Cofense Feed Subdivision Iso Code
Cofense Feed Subdivision Name
Cofense Feed Threat ID
Cofense Feed Time Zone

Integrations (1)

Cofense Feed

README

Cofense Intelligence is reliable, human-verified phishing intelligence for actionable defense and strategic planning. Cofense researchers track emerging trends in phishing, research active threats, and supplement highest-priority investigations. Consumers of the intelligence are confident knowing indicators were validated by Cofense prior to platform ingestion. Cofense Intelligence machine-readable threat intelligence is ingested into platforms to support automation along with human-readable reports to make informed decisions against today’s phishing attacks.

What does this pack do?

Ingests human-verified phishing intelligence with associated malware families
Correlates global phishing campaigns and indicators
Checks the reputation with impact ratings (Major, Moderate, Minor, None) of:
- URLs
- Domains
- IP addresses
- Email addresses
- File hashes
Searches for strings associated with phishing attacks
Links to human-readable reports for an explanation as to why indicators are a risk to business

https://cofense.com/product-services/phishing-intelligence/