ThePhish: an automated phishing email analysis tool

ThePhish is an open-source tool that automates the entire phishing email analysis process starting from the extraction of the observables from the header and the body of an email to the elaboration of a verdict which is final in most cases. It is based on TheHive, Cortex and MISP.

A new version will come when the Python API for TheHive 5 becomes stable, so stay tuned!

Here is the repo: [https://github.com/emalderson/ThePhish](https://github.com/emalderson/ThePhish)

analysis api automated body cases cortex cybersecurity email header misp observables phishing process python thehive tool version