Cofense PhishMe

We are using Cofense frequently to report phishing mail. It is addressing resolving reporting issues before the user reporting is very difficult and it will take time; now, it is easy to report and find the malware, but it is very time-consuming. Cofense is very helpful for auto categorizations, so it will save lots of time.

• Report Phishing.
• Categorize the mail.
• Sending notification.
• Run play book.
• Creating rules for know thread and know legitimated mail.

• it is very useful product.
• I recommend to purchase, it is more value then what your paying.
• Overall it is improving the reputation of the company.

Proofpoint Security Awareness Training, Infosec IQ, SANS Security Awareness Training and Lucy Security

VirusTotal, Lastline, LogRhythm NextGen SIEM Platform

[Cofense PhishMe] is used at Express for security awareness, security education, and protection of the organization from bad actors that are persistent and relentless in the pursuit of attacking the organization from the storefront, back office, and the C-suite.

• Auditable training solutions.
• Constant filtering.
• Ease of use.

Cisco Cloud Email Security, Microsoft 365 (formerly Office 365), BlackBerry Optics (CylanceOPTICS), BlackBerry Protect (CylancePROTECT)

In the past, we were using it only on a quarterly basis as a benchmark type of activity. Nowadays, we are offering Phishing Simulation as a service to our departments and we are slowly getting to 1 big Q exercise (250k people) and 3-4 monthly ones (anywhere from 50 to 5k users).

• CIRT now has a great dataset of simulations that we ran, with some interesting metrics.
• Business leaders now view phishing defense as a metric they want to improve.

SANS Advanced Cybersecurity Learning Platform, Microsoft Yammer, Microsoft Excel

• From a normal user's perspective, it's an easy and fast, very very user-friendly phishing email reporting structure. No need to remember any email address, no need for sophisticated handling of malicious emails while sending/ reporting. Just a click and it is done.
• From the admin and analyst point of view: Easy and clutter-free triaging pane, IOC reputation check facility, Rules and Recipes section for automation and focused triaging, Notification to the reporter based on the triaging done is really a helpful feedback loop.
• Overall: Simple to handle, less learning curve, well managed, less administration time, fewer issues, less maintenance time.

CrowdStrike Falcon Endpoint Protection, Splunk Enterprise Security (SIEM), RSA NetWitness Orchestrator, Exabeam Fusion, Symantec Data Loss Prevention, Palo Alto Networks Cortex XSOAR (formerly Demisto), Palo Alto Networks Next-Generation Firewalls - PA Series, Titanium Cloud, Zscaler Internet Access, Zscaler Private Access, Amazon GuardDuty, Palo Alto Networks Prisma SaaS (formerly Aperture), Palo Alto Networks Prisma Cloud, Cisco Firepower 1000 Series

We are using the Cofense PhishMe solution to send phishing scenarios and we are getting great results and great views in the console. The platform is easy to use and has a lot of resources. We are also using targeted scenarios from the module. Also, the LMS module provides great value to organizations as they have generalized security modules and also have gamification modules for security awareness programs. The platform is user-friendly and does not require training to use the platform. I was able to use it without any prior training. I am able to perform all phishing scenarios from the user-friendly console.

• Good product
• You will get what you paid for.
• Nice resources

Awake Security Platform, RSA NetWitness Logs, Barracuda Cloud Security Guardian