The Socrates Tool - Decode Safe Links workflow template is designed to enhance threat intelligence and phishing defense by decoding URLs protected by ProofPoint URLDefense, Barracuda Link Protection, and Microsoft Safe Links. It extracts the original URL, identifies the encoding type, and defangs the URL for safe handling. Additionally, it queries observables to investigate their presence in other cases, providing comprehensive insights into potential threats.
Use Cases
Phishing , Threat Intelligence Enrichment
Workflow Breakdown
Receives an encoded URL.
Detects ProofPoint URLDefense, Barracuda Link Protection and Microsoft Safe Links.
Decodes and defang original URL.
Query observables to investigate their presence in other cases.
Vendors
Scripting, Utils, Torq Cases