Some of the features which were up to the mark in Cofense
1) The triaging feature of the tool, where in you can easily analyze emails reported, write the notes of the investigation, mark the specificed verdict for the email where if it is Phishing, Malware or a legitimate email that needs to be processed
2) Another brilliant and an important feature, a feature of yara rule writing in Cofense.
Put down the IOC's let the rule process and this will help in tracking the campaigns in future
We dont have to put manual efforts, yara rules and regex writing themselves help in processing emails Review collected by and hosted on G2.com.
Cofense has feature of yara rules and regex writing for the IOC's
Another addition would have been helpful, where in cofense would help capture the phishing campaign pattern with the help of Machine level models.
If it could leverage models, to help in tracking the future campaigns, whenever submitted. If it would be able to recognize IOC's, campaign details and delete emails from the user inbox.
This way it would be helpful to track lot of campaigns at once Review collected by and hosted on G2.com.
