Skip to main content
Cofense Triage v2 app icon

Cofense Triage v2

This app supports actions for Cofense Triage's version 2 API for faster bidirectional phishing analysis and responseBuilt by SOAR Community
soar product badge
Default Version 2.0.1

August 4, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3

Rating
0
(0)

Log in to rate this app

Support
Developer Supported

This app supports actions for Cofense Triage's version 2 API for faster bidirectional phishing analysis and response

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration
  • get reports: Retrieve reports from the Cofense Triage Platform filtered based on the provided parameters
  • get report: Retrieve a report with the provided ID from the Cofense Triage Platform
  • get email: Downloads the raw email for the report that matches the specified report ID
  • get categories: Retrieve categories from the Cofense Triage Platform filtered based on the provided parameters
  • get responses: Retrieve responses from the Cofense Triage Platform. This action is supported for Cofense Triage with version older than 1.23
  • create response: Create a response. This action is supported for Cofense Triage with version older than 1.23
  • categorize report: Categorize a report into the provided category
  • get threat indicators: Retrieve threat indicators from the Cofense Triage Platform filtered based on the provided parameters
  • create threat indicator: Create a threat indicator with the provided parameters
  • get reporters: Retrieve reporters from the Cofense Triage Platform filtered based on the provided parameters
  • get reporter: Retrieve a reporter from the Cofense Triage Platform for the provided reporter ID
  • get urls: Retrieve URLs from the Cofense Triage Platform filtered based on the provided parameters
  • get url: Retrieve a URL from the Cofense Triage Platform for the provided URL ID
  • get comments: Retrieve comments from the Cofense Triage Platform filtered based on the provided parameters
  • get comment: Retrieve a comment from the Cofense Triage Platform for the provided comment ID
  • get rules: Retrieve rules from the Cofense Triage Platform filtered based on the provided parameters
  • get rule: Retrieve a rule from the Cofense Triage Platform for the provided rule ID
  • get integration submissions: Retrieve integration submissions from the Cofense Triage Platform filtered based on the provided parameters
  • on poll: Action handler for the on poll ingest functionality