Skip to main content

PhishUp

This Integration is part of the PhishUp Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

PhishUp prevents phishing attacks, protects your staff and your brand with AI#

If you don't have PhishUp Api Key please create an account on PhishUp and get a free Api Key. Also you can visit and test PhishUp Web Demo.

If you have any question feel free to concat us: info@phishup.com

Configure PhishUp on Cortex XSOAR#

  1. Navigate to Settings > Integrations > Servers & Services.

  2. Search for PhishUp.

  3. Click Add instance to create and configure a new integration instance.

    ParameterDescriptionRequired
    API KEYTrue
    Incident typeFalse
    Trust any certificate (not secure)False
    Use system proxy settingsFalse
    PhishUp Playbook ActionsIf there is any Phishing activity in mail, what should PhishUp do?True
  4. Click Test to validate the URLs, token, and connection.

Commands#

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

url#


PhishUp Url investigation

Base Command#

url

Input#

Argument NameDescriptionRequired
UrlURL for phishup investigation.Required

Context Output#

PathTypeDescription
PhishUp.UrlStringIncoming Url
PhishUp.ResultStringresponse types "Clean", "Phish"
PhishUp.ScoreNumberPhishup Engine Url Score
DBotScore.IndicatorStringThe indicator that was tested.
DBotScore.TypeStringThe indicator type.
DBotScore.VendorStringThe vendor used to calculate the score.
DBotScore.ScoreNumberThe actual score.
URL.DataStringThe URL

Base Command#

phishup-get-chosen-action

Input#

There are no input arguments for this command.

Context Output#

PathTypeDescription
PhishUp.ActionStringChosen action from PhishUp instance

Base Command#

phishup-evaluate-response

Input#

There are no input arguments for this command.

Context Output#

PathTypeDescription
PhishUp.EvaluationStringEvaluating PhishUp Results and Return Phish If There is an Phish Website