The Phish - Инструмент за противодействие на зловредни фишинг имейли

[h3xu]

ThePhish е автоматизиран инструмент за анализ на фишинг имейли, базиран на TheHive, Cortex и MISP. Това е уеб приложение, написано на Python 3 и базирано на Flask, което автоматизира целия процес на анализ, като се започне от извличането на наблюдаемите от заглавието и тялото на имейла до изготвянето на заключение, което в повечето случаи е окончателно.
В допълнение, той позволява на анализатора да се намеси в процеса на анализ и да получи допълнителни подробности за имейла, който се анализира, ако е необходимо. За да взаимодейства с TheHive и Cortex, той използва TheHive4py и Cortex4py, които са Python API клиенти, които позволяват използването на REST API, предоставени съответно от TheHive и Cortex.

За да инсталирате софтуера и да тествате:

https://github.com/emalderson/ThePhish/blob/master/README.md#installation

Как работи:

https://github.com/emalderson/ThePhish/blob/master/README.md#thephish-example-usage

 

[Phreak_me]

Привет,

Бих препоръчал и https://www.phishtool.com/ - PhishTool - Forensic email analysis & incident response.

Free to use е, но качваш имейлите там на своя отговорност - всички данни остават в платформата и как те ги управляват...

2.2 If you submit a file to our service

We will collect all information contained within files that you submit to our service and metadata related to the submission of the file. We will collect, process and store all files, including all data and information contained therein, both personal and otherwise. We will collect and store the metadata generated by your analysis of a file submitted to us. Collecting, processing and storing the files that you submit to us and the metadata you generate is a fundamental aspect of our service, and is necessary for the purposes of provide our services to you and other users aswell as to assist in the further development of our existing and future services.

Our Terms of Service requires you to be the owner of any file you submit, or to have all necessary rights and permissions to use, access and submit the file to us. Any file that you submit may contain within it further files, specifically email attachments which may contain further information both personal or otherwise which you are also required to have the rights and permissions to use, access and submit to us.

Въпреки това, инструментът е много полезен и удобен.

[h3xu]

преди 18 часа , Phreak_me каза:

Привет,

Бих препоръчал и https://www.phishtool.com/ - PhishTool - Forensic email analysis & incident response.

Free to use е, но качваш имейлите там на своя отговорност - всички данни остават в платформата и как те ги управляват...

2.2 If you submit a file to our service

We will collect all information contained within files that you submit to our service and metadata related to the submission of the file. We will collect, process and store all files, including all data and information contained therein, both personal and otherwise. We will collect and store the metadata generated by your analysis of a file submitted to us. Collecting, processing and storing the files that you submit to us and the metadata you generate is a fundamental aspect of our service, and is necessary for the purposes of provide our services to you and other users aswell as to assist in the further development of our existing and future services.

Our Terms of Service requires you to be the owner of any file you submit, or to have all necessary rights and permissions to use, access and submit the file to us. Any file that you submit may contain within it further files, specifically email attachments which may contain further information both personal or otherwise which you are also required to have the rights and permissions to use, access and submit to us.

Въпреки това, инструментът е много полезен и удобен.

Супер е инструмента, благодаря за споделянето!