Build Better Phishing Playbooks with ServiceNow and Recorded Future

December 2, 2020 • The Recorded Future Team

The Verizon Data Breach Investigations Report 2020 report found that social attacks such as phishing and business email compromise cause the majority of breaches today. In March 2020 alone, phishing emails spiked by 667% as opportunistic threat actors targeted consumers and employees alike. As we enter the holiday season, retail-focused phishing campaigns are spiking again.

Security operations and incident response teams are working around the clock to defend their organizations and support new digital transformation initiatives, but without real-time context, they struggle to rapidly prioritize and respond to incidents. In this new reality, security automation and collaboration are more important than ever before.

Automate Alert Triage and Disrupt Adversaries with Recorded Future and ServiceNow

At Recorded Future’s Predict 2020 conference, Mike Plavin, technical product marketing manager, security operations at ServiceNow, showcased the comprehensive Recorded Future ServiceNow integration portfolio, which empowers security teams to streamline workflows, identify and prioritize threats faster, and make more confident risk-based decisions. He demonstrated how elite security intelligence, phishing-specific risk rules, and ServiceNow Flow Designer, create powerful phishing playbooks that automate triage of suspected phishing attacks. Watch that full session and advanced use case here:

By integrating elite intelligence from Recorded Future with ServiceNow Security Incident Response and Threat Intelligence applications, security teams are empowered to:

  • Automatically enrich security incident observables with real-time, evidence-based risk scores — without leaving ServiceNow. Automating how risks are classified saves analysts significant time sorting through false positives and deciding which observables to prioritize, cutting reporting time by 34%.
  • Correlate and analyze internal incident data with contextualized, real-time intelligence from an unrivaled variety of open source, dark web, technical sources, and original research.
  • Monitor and alert on critical threats in real time, enabling quick and decisive response. Recorded Future continuously monitors for risks related to the organization, such as suspected phishing emails, newly registered typosquat domains, and leaked credentials found on the dark web, and delivers real-time alerts to drive immediate action.

Recorded Future’s robust ServiceNow integration portfolio enables analysts to tap into real-time elite security intelligence from within the tools they already use. By automating and orchestrating time-consuming security tasks and providing real-time context exactly when they need it, security and risk teams amplify their impact and maximize their ServiceNow use cases.

New call-to-action