category: Data Enrichment & Threat Intelligence
provider: Proofpoint
commonfields:
  id: 6437c006-1d86-4cdc-89d5-23305f207e3a
  version: -1
configuration:
- additionalinfo: PhishUp Api Key
  displaypassword: API Key
  hiddenusername: true
  name: credentials
  required: true
  type: 9
- display: Incident type
  name: incidentType
  type: 13
  required: false
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- additionalinfo: If there is any Phishing activity in mail, what should PhishUp do?
  defaultvalue: Nothing
  display: PhishUp Playbook Actions
  name: phishup-playbook-action
  options:
  - Nothing
  - ' Delete Mail'
  - ' Move to SPAM'
  required: true
  type: 15
- additionalinfo: Reliability of the source providing the intelligence data.
  defaultvalue: B - Usually reliable
  display: Source Reliability
  name: integrationReliability
  options:
  - A+ - 3rd party enrichment
  - A - Completely reliable
  - B - Usually reliable
  - C - Fairly reliable
  - D - Not usually reliable
  - E - Unreliable
  - F - Reliability cannot be judged
  type: 15
  required: false
- defaultvalue: indicatorType
  name: feedExpirationPolicy
  display: ''
  options:
  - never
  - interval
  - indicatorType
  - suddenDeath
  type: 17
  required: false
- defaultvalue: '20160'
  name: feedExpirationInterval
  display: ''
  type: 1
  required: false
description: PhishUp prevents phishing attacks, protects your staff and your brand with AI.
display: PhishUp
name: 6437c006-1d86-4cdc-89d5-23305f207e3a
script:
  commands:
  - arguments:
    - default: true
      description: Url for PhishUp Reputation Investigation.
      isArray: true
      name: url
      required: true
    description: Url for PhishUp Reputation Investigation.
    name: url
    outputs:
    - contextPath: PhishUp.Url
      description: Incoming URL.
      type: String
    - contextPath: PhishUp.Result
      description: response types "Clean", "Phish", "Error".
      type: String
    - contextPath: PhishUp.Score
      description: Phishup Engine Url Score.
      type: Number
    - contextPath: DBotScore.Indicator
      description: The indicator that was tested.
      type: String
    - contextPath: DBotScore.Type
      description: The indicator type.
      type: String
    - contextPath: DBotScore.Vendor
      description: The vendor used to calculate the score.
      type: String
    - contextPath: DBotScore.Score
      description: The actual score.
      type: Number
    - contextPath: URL.Data
      description: The URL.
      type: String
  - description: Get chosen action from PhishUp instance.
    name: phishup-get-chosen-action
    outputs:
    - contextPath: PhishUp.Action
      description: Chosen action from PhishUp instance.
      type: String
  - arguments:
    - description: takes investigate-url command result.
      isArray: true
      name: URLs
    description: Evaluation PhishUp URLs Response.
    name: phishup-evaluate-response
    outputs:
    - contextPath: PhishUp.Evaluation
      description: returns "Phish" if any response has "Phish" result.
      type: String
  dockerimage: demisto/python3:3.12.13.10116658
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- No tests (auto formatted)
fromversion: 6.0.0