Domain Spoofing Security Copilot Agent
Security Copilot Agent is designed to protect your organization's email channels.
- Category
- Security
- Registry category
- Cybersecurity & IT
- Vendor
- iLink Systems, Inc.
- Location
- Not disclosed
- Reviews
- Not rated (0 reviews on the listing)
- Listed on
- Microsoft Marketplace
- Pricing
- Not stated
Each fact carries one Provenance score: the average of its Disclosure and Evidence scores, the same rule the page uses for the overall score. Click any score to see the math behind it.
Vendor Provenance
Who actually operates this agent.
Build Provenance
What the agent is built on.
Reach Provenance
How the agent is distributed and adopted.
Data Provenance
What the vendor discloses about data handling.
Compliance Provenance
What standards the vendor meets, and who verified them.
What the publisher says
Domain Spoofing Security Copilot Agent is designed to protect your organization's email channels by proactively identifying and mitigating domain spoofing and lookalike domain attacks. Its primary objectives are:
Detection:
- Detect domain spoofing attempts where unauthorized senders impersonate your legitimate domains
- Identify lookalike domain attacks using similarity algorithms against your organization's trusted domains
Show the rest of the publisher’s description (18 more lines)
Remediation:
- Automatically move to junk the emails identified as spoofing attempts with detailed reporting
The Domain Spoofing agent will:
Step 1: Domain Spoofing Detection
- Compare the sender's "Mail From" address against the sender's "From" address
- Detect spoofing when domains don't match or when the sender impersonates organization domains
- If spoofing is detected, the tool will immediately move the email to a junk folder and generate a detailed report
Step 2: Lookalike Domain Detection
- Analyze sender domain against your organization's legitimate domains using KQL Queries
- Calculate domain similarity scores using techniques like Levenshtein distance
- If lookalike is detected, it will automatically generate a detailed report.
Step 3: Triggers for Agent Activation
Scheduled Execution:
- The agent operates on a 60-minute recurring schedule, automatically:
- Collecting email events from the past 60 minutes via Microsoft Defender for Office 365 logs
- Processing all incoming emails through the validation workflow
- Generating real-time threat reports and taking appropriate remediation actionsManual Activation:
- Security analysts can manually trigger the agent for specific time ranges
Preview
4 imagesLinked repositories
Unknown
Unknown means this listing does not publish a repository. It is not a statement that the code is closed.
Publisher resources
Sources
- Marketplace listingMicrosoft Marketplace (opens in a new tab)
- Legal linkPrivacy Policy (opens in a new tab)
- Company recordVendor website company data, matched on ilink-digital.com
- Official registersearch.gleif.org (opens in a new tab)
Reading the score
Disclosure · how many sources corroborate it
Evidence · what kind of evidence backs it
The SettleTop steps above are possible but not automated yet, so today they sit open and a perfect 10 is out of reach. Open information like firmographics and reach has fewer steps to climb, so it sits a little higher for the same visible evidence.
Information shown here reflects the best available information at the time of assessment and may be incomplete, outdated, or subject to change. It should be independently verified before being relied upon for any decision. SettleTop is not liable for any errors, omissions, or decisions made in reliance on this information.
Have information about this agent?
Send it to us for consideration
Spot something missing, wrong, or out of date? Share what you know. Every note reaches our team. It does not change the passport by itself: we review it first.
