phishing-reporter

What problem does it solve?

It turns a suspicious forwarded email into a structured, security-ready incident record without clicking links or opening attachments, reducing time-to-triage and improving IOC quality.

Core Features & Use Cases

• IOC extraction from forwarded email: Collect sender, link, attachment metadata, and header-based signals without interacting with malicious content.
• SEC Jira incident documentation: Create a Jira security incident with phishing type classification and full IOC tables for fast review by security.
• Safe reporter acknowledgment workflow: Send an acknowledgment that instructs the reporter not to click links, open attachments, or reply, with explicit execution confirmation.
• Containment guidance and escalation triggers: Provide type-specific containment steps and note escalation to incident playbooks when compromise is possible.

Quick Start

Ask it to process the reported phishing email using the message-id or subject from the reporter and produce a completed SEC Jira IOC report.