Phishing Detection and Response: Speed and Automation with Cofense Triage and ServiceNow SIR

[MikeSaurbaugh]

Cofense Triage™, phishing detection and response (PDR) platform, accelerates phishing email identification and mitigation. Cofense Triage finds the phish that secure email gateways miss. With Cofense Triage, security teams speed analysis of user-reported emails, find real phish faster, and respond more effectively. Cofense Triage gives incident responders the ability to act on all phishing alerts quickly by automating threat qualification and investigation. SOC teams can focus on interpreting results and responding to phishing threats effectively. As soon as a suspicious email gets reported, thousands of intelligence-driven YARA rules automatically assess the report, clustering it with reports containing similar payloads, and surfacing the highest priority threats for immediate action.

The integration with ServiceNow Security Incident Response (SIR) allows SOCs to ingest reported phishing emails from Cofense Triage’s inbox, reconnaissance, and processed queues. Security incident response tickets can be created based on the threats uncovered by Cofense Triage. SOC analysts working incidents in ServiceNow will be able to view the email threat, ingest threat indicators, prioritize workflow based on security categorization and severity, and bidirectionally communicate with Cofense Triage to update reporting phishing incidents. Empower SOCs with Cofense Triage industry-leading phishing-specific analysis and response and operationalize incident response workflow with ServiceNow Security Incident Response.

https://store.servicenow.com/sn_appstore_store.do#!/store/application/a79df209db98a05066a1f6a4e296197b/1.1.2?referer=%2Fstore%2Fsearch%3Flistingtype%3Dallintegrations%25253Bancillary_app%25253Bcertified_apps%25253Bcontent%25253Bindustry_solution%25253Boem%25253Butility%25253Btemplate%26q%3Dcofense&sl=sh