CheckSender

For phishing incidents, check the sender of the email via Pipl search

python · Pipl

Details

ID	`CheckSender`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Tags	server phishing

README

Checks the sender of the email via a Pipl search. Use this script for phishing incidents.

Script Data

Name	Description
Script Type	python
Tags	server, phishing

Dependencies

This script uses the following commands and scripts.

pipl-search

Inputs

Argument Name	Description
email	The email address to look up. If omitted, the script will instead extract with regular expression from the fullmail argument, where the phishing email should be provided.
fullmail	The raw email text to regex the sender from.

Outputs

There are no outputs for this script.

Source

CheckSender.py CheckSender_test.py CheckSender.yml

Download History Raw

commonfields:
  id: CheckSender
  version: -1
name: CheckSender
script: ''
type: python
subtype: python3
tags:
- server
- phishing
comment: For phishing incidents, check the sender of the email via Pipl search
system: true
args:
- name: email
  default: true
  description: Email address to look up. If omitted, will instead extract with regular expression from the fullmail argument, where the phishing email should be provided.
- name: fullmail
  description: Raw email text to regex the sender from
scripttarget: 0
dependson:
  must:
  - pipl-search
timeout: 0s
fromversion: 5.0.0
dockerimage: demisto/python3:3.12.13.10116658
tests:
- No tests (auto formatted)