Servicenow, Inc.

Sachin Shivarama Nayak

Santosh Reddy Poreddy

Deepakeswaran Sundaragopal Kolingivadi

Amit Sharma

Kurt Joseph Zettel, Ii

Richard Kenneth Reybok

Ryan Christopher Currier

Michel Abou Samah

Scott Lewis

Harold Byun

Zhe Wang

James Gavin Erbes

Apoorv Mehta

Patrice Tollenaere

Farid Firoz Merchant

Amil Sharma

Systems, methods, and media are used to identify phishing attacks. A notification of a phishing attempt with a parameter associated with a recipient of the phishing attempt is received at a security management node. In response, an indication of the phishing attempt is presented in a phishing attempt search interface. The phishing attempt search interface may be used to search for additional recipients, identify which recipients have been successfully targeted, and provide a summary of the recipients. Using this information, appropriate security measures in response to the phishing attempt for the recipients may be performed.

Phishing attempt search interface

Systems, methods, and media are used to identify phishing attacks. A notification of a phishing attempt with a parameter associated with a recipient of the phishing attempt is received at a security management node. In response, an indication of the phishing attempt is presented in a phishing attempt search interface. The reported phishing attempts may be aggregated based upon specified criteria to avoid redundant incidents that may hinder remediation efforts.

Phishing attempt categorization/aggregation interface

Providing are incident response techniques useful for personas with a variety of experience levels are described. The incident response techniques include a graphical user interface (GUI) for providing a variety of different views for different personas. The graphical user interface may provide a landing page for providing a queue of risk-score prioritized incidents, an incident playbook for providing default or customizable instructions for resolving a particular incident to lesser-experienced personas, an explore container for facilitating efficient navigation of data associated with a particular incident by more-experienced personas, and an activity stream container for providing an overview of activities that have been performed with regard to a particular incident to more-experienced or supervising personas. The explore container may also be integrated with tools for performing actions with the data without leaving the graphical user interface.

Incident response techniques

Growing community of inventors

Santa Clara, CA, United States of America

Sachin Shivarama Nayak