KnowBe4 PhishER

Version: 1.6
Updated: Mar 4, 2024

KnowBe4 PhishER Identifies and responds to email threats faster with automatic prioritization for emails, also helps your InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly.

Actions

• Get Message (Enrichment) - Returns a PhishER message by ID.
• Search Messages (Enrichment) - Returns paginated messages based on the specified Lucene query.
• PhishER Messages Daemon (Daemon) - Automatically pull messages based on the specified Lucene query.

KnowBe4 PhishER Configuration

Follow the steps from the KnowBe4 PhishER guide to create your authentication credentials.

Configure KnowBe4 PhishER in Automation Service and Cloud SOAR

Before you can use the integration, you must configure it so that the vendor can communicate with Sumo Logic. For general guidance, see Configure Authentication for Integrations.

1. Access App Central and install the integration.
2. Select the installed integration in the Integrations page.
   Classic UI. In the main Sumo Logic menu, select Automation and then select Integrations in the left nav bar.
   New UI. In the main Sumo Logic menu, select Automation > Integrations. You can also click the Go To... menu at the top of the screen and select Integrations.
3. Select the integration.
4. Hover over the resource name and click the Edit button that appears.
   
5. In the Add Resource dialog, enter the authentication needed by the resource. When done, click TEST to test the configuration, and click SAVE to save the configuration.

• Label. The name for the resource.
• URL. KnowBe4 PhishER host URL.
• API Token. Your KnowBe4 PhishER API key.
  

For information about KnowBe4 PhishER, see KnowBe4 PhishER documentation.

Change Log

• April 26, 2023 - First upload
• June 26, 2023 (v1.3) - Removed unnecessary empty lines and other little changes
• August 24, 2023 (v1.4)
  • New Daemon: PhishER Messages Daemon
• September 26, 2023 (v1.5) - Updated Action: Get Message
• March 4, 2024 (v1.6) - Updated code for compatibility with Python 3.12