Cofense Triage is a phishing-specific security orchestration, automation, and response (SOAR) platform designed to automate and prioritize reported phishing threats, enabling faster incident response. It clusters similar reported emails, analyzes them using attributes like YARA rule matching, employee reporting reputation, threat intelligence, and integrates with malware analysis tools like Lastline Analyst for deeper inspection. The platform reduces alert noise through automated analysis and supports integration with security systems and workflows, such as ServiceNow Security Operations, to streamline threat response and remediation. Its purpose is to enhance the efficiency and accuracy of phishing threat detection and response by leveraging both human-reported intelligence and automated systems.
