Security Operations - Phishing

[Mike_R]

Hello,

Looking for advice/best practice for getting phishing emails into ServiceNow. The process right now is that a user reports a phish in Outlook and when they do that the email gets sent to ProofPoint to evaluate.

We would like to get this into ServiceNow also as a Security Incident.

Thanks,

Mike

[amaradiswamy · Accepted solution]

Please check if below OOB feature works for you.

https://docs.servicenow.com/bundle/newyork-security-management/page/product/security-incident-respon...