CheckPhish

With this Playbook App, you can automatically send URLs from ThreatConnect to CheckPhish and retrieve information on them. CheckPhish is a data enrichment platform that will provide more details on the URL including passive DNS data as well as similar URLs. This integration will be beneficial for SOC analysts performing phishing email triage, but also for Threat Intel Analysts performing infrastructure pivoting.

The following actions are available:

• Get URL Enrichment – Retrieve enrichment information for a specified URL.

This app can be found in the ThreatConnect App Catalog under the name: CheckPhish