Overview

Cofense Intelligence is human-vetted phishing threat intelligence that provides accurate and timely alerts to strengthen an enterprise’s ability to quickly identify and respond to phishing attacks in progress.

Cofense receives more than a million messages daily from a wide variety of sources. Attacks are analyzed to determine relationships between them, while unique clustering algorithms create populations of attack types. Once a new threat cluster is identified, its characteristics are documented and updated in our threat repository.

Attack payloads for each confirmed phishing campaign are analyzed to determine the nature of each threat. This information updates our data lake for analysis across campaigns and timeframes. Importantly, Intelligence analyzes attacks that don’t have payloads, such as credential phishing campaigns.

This proactive approach enables disruption of potentially malicious attacks. Intelligence exposes tactics used to penetrate the network, creating relationships between phishing campaigns and IOCs. The combination of actionable threat intelligence and understanding the correlation between phishing attacks and their motivators helps teams prioritize, investigate and respond.

Threat intelligence is published in multiple formats for security teams and security infrastructure to consume and appropriately respond: Human-readable threat intelligence reports (HRTI) and machine-readable threat intelligence reports (MRTI).

• HRTI provides deep-dive and trending analysis of your biggest threats, with expert analysis of the attack methodology.

• MRTI feeds directly into security devices and threat repositories. Firewalls, IDS/IPS, SIEM can now detect and block emerging threats at the earliest stages of the attack.

• SaaS investigation apps to investigate phishing and malware attacks. These on-demand tools provide the latest insight on which attacks are related and how the attacks are being executed.