This workflow automates phishing email analysis and reporting by integrating Gmail or Microsoft Outlook, AI-powered email threat detection, and Jira ticketing. Incoming emails are captured, analyzed using ChatGPT to determine whether they’re malicious or benign, and then logged into Jira with detailed context, screenshots, and attachments — streamlining security operations and reducing manual triage effort.
Features
- Multi-Source Email Intake
- Supports both Gmail and Microsoft Outlook triggers.
- Polls inboxes every minute to detect new emails automatically.
- Data Extraction & Preparation
- Extracts email metadata (subject, recipient, headers, body).
- Converts the email body into both plain text (
.txt) and visual screenshot format for versatile analysis and reporting.
- AI-Powered Threat Analysis
- Uses ChatGPT (OpenAI) to analyze email content and headers.
- Determines if an email is potentially malicious (phishing) or benign, returning a structured JSON response with a detailed breakdown.
- Automated Jira Ticket Creation
- Creates two types of Jira tickets depending on threat classification:
- Potentially Malicious — flagged as phishing attempt.
- Potentially Benign — logged as a safe report.
- Each ticket includes:
- A detailed AI-generated analysis summary.
- Attached email screenshots and text body for investigation.
- Creates two types of Jira tickets depending on threat classification:
- Attachment Handling
- Automatically renames, prepares, and uploads the email screenshot and text file to the corresponding Jira ticket for full context.
- Security Operations Efficiency
- Reduces manual investigation workload.
- Ensures all relevant evidence is captured and available for review.
- Standardizes phishing reporting processes across the organization.
