Cofense Triage Reviews and Ratings

Use Cases and Deployment Scope

We utilize Cofense Triage platform to help us dealing with user-reported emails. Platform is automatically grouping reported emails into so-called clusters, based on sender. (This allows bulk-processing of the emails)

It also enables automatic categorization of emails based on set of predefined and custom rules which streamlines triage process.

Lastly, platform allows automatic response to be sent to the end-user based on defined criterias.

Using Cofense Triage allows us to triage a subset of incoming reports and identify real phishing cases amongst those

Likelihood to Recommend

The tool is very helpful in improving Phishing detection capabilities as it streamlines the process of analyzing user reports a lot. Besides it has a built-in mechanism of rating reporters(end-users) based on their historical performance. Downside - tool requires continuous resource investment to deliver best result.

Tool is not helping too much in improving user-education, because automated response process is not immediate and is prone to errors.

Use Cases and Deployment Scope

I work at an MSSP where we use Cofense to manage multiple customers who send us potential phishing emails to analyze. Cofense speeds up this process by presenting important information up front. The information is organized well and it is very easy to triage and come to a determination if an email is legit or malicious. Beyond that, the automation that can be created in Cofense provides a way to easily handle noise and reduce the amount of time working through obvious spam/benign emails.

Likelihood to Recommend

Cofense is well suited for any security center that needs to triage a large amount of reported/suspicious emails and act on them quickly.

Use Cases and Deployment Scope

I will list the product address and scope of use in one paragraph below. In my organization, we use Cofense Triage for e-mail security. Mainly Cofense Triage automates the scanning, analysis, and blocking of e-mails with malicious intent. Our end users also have the ability to manually report suspicious and potentially malicious e-mails. There is an add-in integrated into our e-mail platform/application, which is a button that end users click to report an e-mail. I receive and see all the e-mails which are reported and analyze which ones are malicious and which ones are not. From there, have an action plan.

Likelihood to Recommend

In my experience as an administrator. Cofense generates reports of the types of e-mails which are scanned, reported, and blocked, and from there, I can present to the board the work which is automated, which gives our analysts the to focus on other issues. It is very well suited to a large business as it enforces automation and collaboration between different IT sectors in my organization. The main reason is it enforces e-mail security. There is no scenario that I can think of where Cofense Triage is less appropriate.

Use Cases and Deployment Scope

Triage has been very helpful with remediating phishing emails that hit our employees mailboxes. We are able to use the provided and customized rules to filter out legitimate emails which help our investigators save time by looking at high fidelity alerts. The simplicity of the product is also great for our end users which enables them easy access to report suspected phishing emails.

Likelihood to Recommend

Cofense Triage has been great for our end users as well as our engineers and investigators. We are able to streamline phishing reports and investigate and respond in a timely manner. This allows us to stay vigilant against phishing techniques while providing a great user experience. Utilizing the provided and customizable rules allows for easy integration to existing workflows and products.

Use Cases and Deployment Scope

Cofense Triage allows the analysts on our Threat Detection team the

ability to quickly review and respond to each of the reported emails by

our users. Our response rate to our employees is now 100% and we are

able to stay on top of undetected threats that come across in phishing

emails. Cofense Triage conducts the initial analysis on these emails and

tags them appropriately so that we cut down on the amount of time that

we need to spend on each one.

Likelihood to Recommend

Cofense Triage is well suited for a large enterprise environment where manually reviewing and responding to reported phishing emails would not be feasible. Cofense Triage may not be suitable for smaller organizations, as the cost-to-benefit ratio wouldn't make it a worthwhile investment.

Use Cases and Deployment Scope

We use Cofense Triage to analyze emails reported from users from their email inbox. With the full scope of emails, we can then proceed to break down possible targeted campaigns towards our organization. Also, we can then give access to other teams that will further analyze the emails and classify them in different categories depending on the type of attack, such as credential phishing, malware or business email compromise.

Likelihood to Recommend

It is best suited for incident response and threat analysis teams, as Cofense Triage allows them to check emails reported by users in real time.

Use Cases and Deployment Scope

We run Cofense Triage as an MSSP, offering as part of a managed service to our clients. We provide the analysts who Triage the reported emails, make decisions on their authenticity and malicious intent. Our analysts then provide feedback to the reporter and we summarize details of the overall Triage service on a regular basis. We use Triage in conjunction with Vision to provide an overall email security service.

Likelihood to Recommend

Triage is an excellent solution for analyzing, categorizing and responding to reported emails. It has a simple interface which is easy to get used to and the features can be used to semi-automate many actions, speeding up the analysis massively. This is a great platform for analyzing small to medium amount of emails (10-20 per analyst per day), however it takes quite a lot of setup of automation to make it useful for larger scale companies.

Use Cases and Deployment Scope

My company use Cofense Triage to identify and analyse any malicious emails that appear in employee mailboxes. This allows us to protect employees from external threats. We can use examples of these malicious emails to show employees during phishing training exercises. Cofense has helped to address the concerns of phishing emails targeting our employees. The tool is easy to use and easily adaptable to your needs.

Likelihood to Recommend

Cofense triage can be used for all businesses as it is easily adaptable to your needs. It is an amazing tool to increase your cyber security defences within the business. So far this month my company have been able to identify 11 malicious emails which otherwise could have gone undetected.

Use Cases and Deployment Scope

To solve the phishing response system

Likelihood to Recommend

- All enterprise organization who are trying to corelate emails that are missed by the SEGs should use this system

- Small organization may not need them.

Use Cases and Deployment Scope

The system is great; it really does take the worry away of parsing through emails that may be deemed benign or not. The deployment was easy, and managing the solution was also easy; the solution integrates with other solutions, such as Cuckoo, which helps provide greater insight into URLs and attachments.

Likelihood to Recommend

It has been well suited for parsing end-user submissions.