Phishing analysis
Keepnet + USTA integration
Query USTA threat intelligence for URLs and file hashes.
Lookup
Keepnet integrates with USTA to query USTA threat intelligence for URLs and file hashes.
What you get
- A verdict added to incidents automatically
- Usable as a condition in playbook rules
- Shown next to the other engines’ results
How it works
- An employee reports an email
- Keepnet sends its URLs and file hashes to USTA
- The verdict joins the incident and can trigger a playbook
Data and permissions
| Data | Direction | Detail |
|---|---|---|
| URLs and file hashes from reported emails | Out | Only what this engine checks |
| Verdict | In | Stored with the incident |
What you need
- Your own USTA API key
- Incident Responder
Set up
Company settings, Integrations: paste your API key.
Related integrations
- Works with
- Incident Responder
- Built by
- Keepnet
- Last updated
- October 2026
