Intrinsec and GLIMPS Automate User-Reported Phishing Analysis With PhishReport
Summary
Intrinsec’s PhishReport service combines LLM-based email triage with GLIMPS attachment analysis to assess user-reported emails, provide verdicts and recommendations, and alert client security teams to malicious messages.
Key points
- PhishReport integrates with Microsoft 365 and uses the existing Outlook reporting button to collect suspicious emails.
- Intrinsec’s LLM-based agents score reported emails and attachments before forwarding higher-risk attachments for GLIMPS analysis.
- GLIMPS says its analysis uses more than 25 detection and analysis engines, including eight proprietary AI models, and returns a verdict in three seconds.
- The workflow combines the verdict with indicators of compromise and MITRE ATT&CK mapping to produce a conclusion and recommendations.
- For emails judged malicious, the client security team is alerted and an incident is created in Intrinsec’s Cyboard platform; Outlook quarantine covers the reporting user’s mailbox, not other recipients’ mailboxes.
- Intrinsec says GLIMPS analysis runs in a closed environment on servers hosted in France and Europe, without reuse or resale of client data.
Article Details
- Event Type
- Intrinsec and GLIMPS partnership around PhishReport, an automated service for analyzing user-reported phishing emails.
- Impact
- The companies say PhishReport combines Intrinsec AI pre-analysis with GLIMPS attachment analysis to return a verdict, extracted indicators, and recommendations, reducing manual processing from several tens of minutes to a few minutes. When an email is judged malicious, the client security team is alerted and an incident is created in Intrinsec’s Cyboard platform. Outlook’s automatic quarantine applies only to the reporting user’s mailbox; other mailboxes that received the same message remain the security team’s responsibility. The article says GLIMPS analysis runs in a closed environment on servers hosted in France and Europe, without reuse or resale of client data.
Vendors
GLIMPSC’est exactement la promesse de PhishReport, l’offre d’Intrinsec qui s’appuie sur la technologie d’analyse de GLIMPS pour qualifier automatiquement les e-mails suspects remontés par les utilisateurs.IntrinsecC’est exactement la promesse de PhishReport, l’offre d’Intrinsec qui s’appuie sur la technologie d’analyse de GLIMPS pour qualifier automatiquement les e-mails suspects remontés par les utilisateurs.
Products
CyboardSi l’e-mail est malveillant, l’équipe sécurité du client est alertée et un incident est créé sur la plateforme Cyboard d’Intrinsec, avec l’ensemble des éléments d’analyse et les marqueurs (IOC) extraits.Microsoft 365 Apps for EnterprisePhishReport s’intègre directement à l’environnement Microsoft 365.OutlookPour l’utilisateur, rien ne change, il continue d’utiliser le bouton de signalement de son Outlook.PhishReportC’est exactement la promesse de PhishReport, l’offre d’Intrinsec qui s’appuie sur la technologie d’analyse de GLIMPS pour qualifier automatiquement les e-mails suspects remontés par les utilisateurs.