CheckPhish
Important
Some information in this article relates to a prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
This plugin allows users to utilize the CheckPhish AI to analyze URLs for potential phishing threats, tech support scams, cryptojacking, and other security risks. Utilizing CheckPhish's advanced machine learning models, this plugin provides detailed insights including:
- The likelihood of a URL being malicious
- Classification of the threat type
- Timestamps for when the URL was last scanned
- Detailed threat analysis
- Historical data on URLs to track behavior over time
For more information, see CheckPhish.
Note
This article contains information about third-party plugins. This is provided to help complete integration scenarios. However, Microsoft does not provide troubleshooting support for third-party plugins. Contact the third-party vendor for support.
Know before you begin
Integration with Security Copilot works with an API key. You need to take the following steps before using the plugin.
Get your CheckPhish API key. If you don't have one yet, follow these steps:
- Registering on the CheckPhish platform.
- Find your API key in your user profile.
- Copy the API key.
Sign in to Microsoft Security Copilot.
Access Manage Plugins by selecting the Plugin button from the prompt bar.
Next to CheckPhish, select Set up.
In the Value field, paste your API Key, and then select Save.
Sample CheckPhish prompts
After the CheckPhish plugin is configured, you can use the following capabilities with Security Copilot. The following table lists example prompts to try.
| Capability | Example prompts |
|---|---|
| URL Scan - Analyze a URL for potential threats Required input: - URL |
- Ask CheckPhish to check [URL] - What does CheckPhish say about [URL]? |
Troubleshoot the CheckPhish plugin
Errors occur
If you encounter errors, such as Couldn't complete your request, or An unknown error occurred. Make sure the plugin is turned on. This error may occur if the lookback period is too long, causing the query to attempt to retrieve an excessive amount of data. If the issue persists, sign out of Security Copilot, and then sign back in.
Prompts aren't invoking the correct capabilities
If prompts aren't invoking the correct capabilities, or prompts are invoking some other capability set, you might have custom plugins or other plugins that have similar functionality as the capability set you want to use.
Provide feedback
To provide feedback, contact CheckPhish.