Automate Reporting for Security Awareness Training Events and Suspicious Email Remediation Management with Cortex XSOAR and KnowBe4



Screenshot 2023-04-28 at 2.20.13 PMSecurity teams face unique challenges in today’s rapidly-changing landscape of phishing, malware, and other social engineering and cybersecurity threats. Collaboration across disparate teams and siloed tools adds additional layers of complexity to security teams’ day-to-day operations. When security teams use different systems for simulated phishing, security awareness training, incident response and remediation, it is difficult to track and optimize the full lifecycle of an incident.

To overcome these challenges and allow security programs to scale, organizations should integrate, automate, and orchestrate as many security tasks as possible across their primary teams, tools, and systems.

KnowBe4 and Cortex XSOAR are excited to share two new content packs for KMSAT and PhishER that are now available in the Cortex XSOAR Marketplace. These new content packs allow Cortex XSOAR customers to integrate security test results, training data reporting, custom user events, and user-submitted suspicious email elements into playbooks. This joint solution is designed to help you respond to risks, non-compliance, and potential threats faster.

The PhishER content pack integrates threat alerts and resolution actions into Cortex XSOAR. This speeds incident recovery by allowing mutual customers to pull potentially malicious email elements into Cortex XSOAR, enrich the threat data via other connected systems, and ultimately automate the dispositioning and resolution inside of the PhishER console.

Both content packs can be installed with the click of a button. 

Let’s take a look at why these integrations are so important for your security program.

The KnowBe4 KMSAT content pack enables you to:

  • Automatically identify and classify risk indicators, such as simulated phishing failures.
  • Automate training reporting to discover non-compliance and provide evidence of compliance when needed.
  • Use custom events to trigger additional training based on external risks or behaviors.

The KnowBe4 PhishER content pack enables you to:

  • Automate incident response for user-reported potential threats.
  • Recover rapidly from malicious emails and increase resiliency against new attacks with tags and actions.
  • Automatically identify and enrich threat data for incidents to disposition and resolve them more quickly.

With both content packs, eliminate guesswork and navigate quickly across your workloads and unstructured data, reducing the time it takes to investigate and respond to issues.

Together, KnowBe4 and Cortex XSOAR enable your security and IT teams to better manage your security awareness program and orchestrate your security response to potential email threats. 

Learn More

Build your security programs with the KnowBe4 KMSAT content pack and PhishER content pack, available now on the Cortex XSOAR Marketplace. Look up pre-built integrations for your top security tools with over 900 content packs available for Cortex XSOAR, the market’s leading SOAR platform. 

Don’t have Cortex XSOAR? Download the Community Edition to get started. 

Learn more about KMSAT and PhishER or see the KMSAT pack and the PhishER pack on the XSOAR Marketplace. 

Learn More About Our New Integration

Download Now

Don't like to click on redirected buttons? Copy & paste this link into your browser: https://www.knowbe4.com/hubfs/KnowBe4-KMSAT-PER-Cortex-SOAR-Integration.pdf




Subscribe to Our Blog


Comprehensive Anti-Phishing Guide




Get the latest about social engineering

Subscribe to CyberheistNews