Within Keepnet Labs anti-phishing and awareness platform, there is also a Phishing Incident Responder, as previously mentioned. This fully automated, inbox-based, anti-phishing solution helps you to analyze suspicious emails in 1 minute, with integrated next-generation technologies. Incident Responder helps to find an incident, warn the user, or delete the email from a user's inbox!

The Incident Responder module allows a user to report suspicious emails with one click, sending the email content to Keepnet Labs for header, body, and attachment analysis.

According to the malware result, Incident Responder creates a variety of attack signatures for alarm generation or blocking of active security devices. The user experience with Incident Responder is very simple. A single click is required to report a suspicious email via an Outlook or browser plugin:

The Incident Responder module is integrated with Virustotal, Zemana Anti-Malware, Trapmine, and Roksit DNS Firewall, with licenses for these products bundled together, saving you thousands.You can search and detect which users the suspicious email belongs to and take preventive measures with just a single click. Emails sent to the Incident Responder are thoroughly analyzed. Firstly, the header is checked for anomaly detection and spam control with integrated anti-spam services. The message body is checked for URL reputation control, malicious content detection, and detection of suspicious content with artificial intelligence.

Moreover, attachments are checked against known malware control with antivirus services, unknown malware is detected with anti-malware sandbox technology, and zero-day file format exploits are detected with anti-exploit technology. Incident Responder also works with third-party services. If you use a threat analysis service such as Fireeye, Bluecoat, or Palo Alto, we can integrate them to automate analysis actions, saving time.