PhishLabs - Whitelist false positives

Whitelists indicators from PhishLabs that were classified as false positives, according to a defined period of time.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • Builtin

Scripts

  • PhishLabsPopulateIndicators

Commands

  • closeInvestigation

Playbook Inputs


NameDescriptionDefault ValueRequired
SinceThe whitelist indicators within this duration (from now).1hOptional

Playbook Outputs


There are no outputs for this playbook.

Playbook Image


PhishLabsWhitelistIndicators