ThePhish: an automated phishing email analysis tool

ThePhish is an open-source tool that automates the entire phishing email analysis process starting from the extraction of the observables from the header and the body of an email to the elaboration of a verdict which is final in most cases. It is based on TheHive, Cortex and MISP.

A new version will come when the Python API for TheHive 5 becomes stable, so stay tuned!

Here is the repo: [https://github.com/emalderson/ThePhish](https://github.com/emalderson/ThePhish)

https://preview.redd.it/ji8vuiubr7wa1.jpg?width=780&format=pjpg&auto=webp&v=enabled&s=8566b2e95c1eb5b1e28227225fd521994e3e6ecc

analysis api automated body cases cortex email header infosecnews misp observables phishing process python thehive tool version