The "Pangea - Email Enrichment with Cache" workflow template offers a robust solution for real-time email reputation analysis within threat intelligence processes. By receiving emails from a parent workflow, it checks against a cached response database before querying Pangea for the latest threat intelligence. Notably, the system caches new data to optimize future queries, ensuring fast and reliable access to email reputation data. This workflow is crucial for organizations in need of rapid and accurate email threat analysis while minimizing API calls.
Optional Triggers
"This workflows is intended to be used as a function."
Use Cases
Function, Threat Intelligence Enrichment
Workflow Breakdown
Receives an Email as input.
Lookup global variables for cached responses in the past 24 hours.
If reputation is found on local cache, the saved data is returned to the parent workflow.
When no reputation is found in cache, a summary of the analysis data is created and saved with the original api data.
Vendors
Utils, Torq, Pangea
Workflow Output
Returns full analysis data and a summary of the information.
Tips
Set \"Provide Raw Data Analysis\" to true or false to add or remove original vendor information to the output