Item: Cofense Triage
Rating: 6
Author: Verified User

Use Cases and Deployment Scope

Cofense Triage is used to parse and examine user reported phishing and determine the appropriate actions as in remediating active campaigns, blocking senders and domains, and making sure our team members are not vulnerable to further attacks by leveraging artifacts in the email header and body. Rules and recipes are created to reduce noise.

Pros and Cons

Easy to read parsed email
Easy to navigate tabs in email view
Good options for correlating and grouping based on indicators

Keyboard shortcuts nonexistent
APIs are lacking across the board and updates to APIs are too slow
Should be easier to move from one report to another

Return on Investment

Saved time in responding to phishing by detecting sooner
Improved remediation efforts of phishing campaigns
Reduced staffing needs

Key Insights

Do you think Cofense Triage delivers good value for the price?

Not sure

Are you happy with Cofense Triage's feature set?

Yes

Did Cofense Triage live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Cofense Triage go as expected?

I wasn't involved with the implementation phase

Would you buy Cofense Triage again?

Likelihood to Recommend

Good for general phishing email report investigation and tracking of threat indicators, but APIs are very much lacking for integration with SIEM/SOAR products that is vital to a mature security operations. Some elements of UI are unforgivably clunky. Does not play nicely with dark mode, causing analysts to go blind.

Triage

Overall Satisfaction with Cofense Triage