PhishER Integrations

Below is a list of some of our integrations for PhishER. If you do not see the integration you are looking for, visit our API documentation to learn more about our API's capabilities. For more information on integrations for our other products, see our KMSAT Integrations and Phish Alert Button (PAB) Integrations articles.

• Blumira is a cloud-based SIEM platform that uses Syslog to obtain PhishER data for security monitoring and incident detection. This integration allows you to centralize and analyze logs to detect and respond to threats.
  For more information, see the Blumira article Integrating KnowBe4 PhishER With Blumira.
• Cortex XSOAR is a SOAR platform that automates security operations and incident response. This integration allows you to send PhishER data to other connected platforms through XSOAR, automate manual functions, and send data back to PhishER to change attributes and add tags or comments. To learn about the benefits of this integration, see our Cortex XSOAR and KnowBe4 document.
  For more information, see our How to Integrate Cortex XSOAR with Your PhishER Platform article and XSOAR's PhishER article.
• CrowdStrike Falcon Sandbox is a platform that combines with CrowdStrike Falcon Intelligence's threat intelligence service to analyze files and URLs for malicious content. This integration allows you to submit files and URLs for analysis in a sandbox environment, and view a malware analysis report in your PhishER platform or your CrowdStrike Falcon platform. To integrate the CrowdStrike Falcon Sandbox with PhishER, you must have a PhishER Plus subscription and an active CrowdStrike Falcon Intelligence subscription. For more information, see our How to Integrate CrowdStrike with Your PhishER Platform article.
• INKY is a cloud-based email security platform designed to search for fraud and spot imposters by a pixel. This integration allows you to utilize the INKY reporting button and avoid false positives while still feeding reporting data to the KnowBe4 campaign. You can also send the email to your PhishER platform.
  For more information, see our INKY Phish Alert Button and PhishER Integrations article and the INKY article KnowBe4 & INKY Integration.
• Revelstoke is a SOAR platform that provides alerts and automated security incident response. This integration allows you to improve your security awareness and respond to threats.
  For more information, see the Revelstoke article Revelstoke + PhishER Integration.
• Swimlane is a security operations management software that provides workflow tools, such as automated incident response. Their SOAR platform streams your incident response process by integrating your people, processes, and technology.
  For more information, see Swimlane's integration documentation.
• Tines is an automation platform that makes it easy for you to offload any of your monotonous workflows, giving you back time to increase your impact. You can connect to any REST API or web application in seconds.
  For more information, see our Tines and PhishER Webhook Integration article.
• VirusTotal is a service that inspects and analyzes files for malicious content. A VirusTotal scan is completed using over 70 antivirus scanners. If a file is submitted for a VirusTotal scan, the results will be shared publicly in the VirusTotal community. This integration allows the VirusTotal Public API to conduct scans in PhishER.
  For more information, see our How to Integrate VirusTotal with Your PhishER Platform article.

Back to top