duo-labs / isthislegit

Dashboard to collect, analyze, and respond to reported phishing emails.
BSD 3-Clause "New" or "Revised" License
284 stars 51 forks source link

Feature request: parse URLs out into webhooks/make them available to rules #40

Open paddycarver opened 5 years ago

paddycarver commented 5 years ago

It would be super awesome if IsThisLegit could parse the URLs found in a reported email out into a list that's available both in webhooks and in the rules engine. Webhooks would let our stats index them and show if certain URLs are showing up more often than others. Rules would let us automate responses, directing employees to pre-created resources for specific threats, etc. If reports could do a regex match against whether a URL in the email matches a regular expression, that would just be icing on the cake, honestly, and would enable some really flexible automation.