Phishing Lookup

Splunk Community

Phishing Lookup

Phishing Lookup
Archived
This app compares the URLs in your indexed data with a lookup CSV file provided by http://www.phishtank.com to see if any of your indexed URLs are in the list of known phishing sites. Use this app to supplement your security. Use as is. Please note that just because your data does not have any known access to a phishtank validated phishing site does not mean that it is totally safe. Your events may still have URL's that are misrepresentations of safe sites to visit, but they have not been validated and placed in the phishtank data store. Instructions on usage are in the README.txt. The app comes with one form search dashboard and one macro called phishing that you can use in your alerts. The app has been tested on Unix like Indexers. Although a windows bat file has been provided, you'll need to test and adapt it on Windows for your environment.
0 topics and 0 replies mentioned Phishing Lookup in
Latest Topics
No posts to display.
Latest Replies
No posts to display.
Top Topics
No posts to display.
My Topics
No posts to display.