Phishing investigation response using xsoar and Slashnext

Inspiration

Phishing being the number one attack vector.

What it does

Responds to a phishing alert. Ingests phishing email and extracts and enriches indicators using Slashnext integration and performs conditional checks and takes response actions.

How I built it

xsoar Slashnext integration

Challenges I ran into

Instance configuration

Accomplishments that I'm proud of

Content pack

What I learned

Phishing response can be standardized

What's next for Phishing investigation response using xsoar and slashnext

Minor enhancements

Built With

• api
• integration
• xsoar