Phishing

Name SOAR App D3FEND Use Case
AD LDAP Account Locking AD LDAP Account Locking Phishing, Endpoint
AWS IAM Account Locking AWS IAM Account Locking Phishing, Endpoint
Active Directory Disable Account Dispatch AD LDAP, Azure AD Graph Account Locking Phishing, Endpoint
Azure AD Account Locking Azure AD Graph Account Locking Phishing, Endpoint
Cisco Umbrella DNS Denylisting Cisco Umbrella DNS Denylisting Phishing, Endpoint
CrowdStrike OAuth API Dynamic Analysis CrowdStrike OAuth API Dynamic Analysis Enrichment, Phishing, Endpoint
DNS Denylisting Dispatch   DNS Denylisting Phishing, Endpoint
Dynamic Analysis Dispatch   Dynamic Analysis Enrichment, Phishing, Endpoint
G Suite for GMail Message Identifier Activity Analysis G Suite for GMail Identifier Activity Analysis Phishing
G Suite for Gmail Message Eviction G Suite for GMail Email Removal Phishing
G Suite for Gmail Search and Purge G Suite for GMail Email Removal, Identifier Activity Analysis Phishing
MS Graph for Office 365 Message Eviction MS Graph for Office 365 Email Removal Phishing
MS Graph for Office 365 Message Identifier Activity Analysis MS Graph for Office 365 Identifier Activity Analysis Phishing
MS Graph for Office 365 Message Restore MS Graph for Office 365 Restore Email Phishing
MS Graph for Office365 Search and Purge MS Graph for Office 365 Email Removal, Identifier Activity Analysis Phishing
MS Graph for Office365 Search and Restore MS Graph for Office 365 Restore Email Phishing
Panorama Outbound Traffic Filtering Panorama Outbound Traffic Filtering Phishing, Endpoint
PhishTank URL Reputation Analysis PhishTank Identifier Reputation Analysis Enrichment, Phishing
Splunk Attack Analyzer Dynamic Analysis Splunk Attack Analyzer Connector for Splunk SOAR Dynamic Analysis Enrichment, Phishing, Endpoint
Splunk Automated Email Investigation   Dynamic Analysis, Sender Reputation Analysis Phishing
Splunk Message Identifier Activity Analysis Splunk Identifier Activity Analysis Phishing
URL Outbound Traffic Filtering Dispatch   Outbound Traffic Filtering Phishing, Endpoint
UrlScan IO Dynamic Analysis urlscan.io Dynamic Analysis Enrichment, Phishing, Endpoint
VirusTotal V3 Dynamic Analysis VirusTotal v3 Dynamic Analysis Enrichment, Phishing, Endpoint
ZScaler Outbound Traffic Filtering Zscaler   Phishing, Endpoint