Is it possible to create a phishing playbook that generate pdf document as a response?

[Lawrence_Michel]

Hello team, working on a phishing playbook looking to generate a response that contains a pdf document for the end-user to fill out and send back. Any tips or guidance on this?

[shakedtal]

Hi @Lawrence_Michel , there is more than one way to accomplish this, but one method is as follows: Send a copy of the PDF as an attachment to an email inbox that will keep that email indefinitely. It can go in any folder or account, so long as SOAR can use the "forward email" action. That action will generate a new message id, which you pass to the wait for mail from user to get the response.

Alternatively, you can store the PDF in Google Drive, and use the download file to path action to pull it into the case, then use the regular send mail action, followed by the same wait for mail from user to get the response.

[Lawrence_Michel]

Thank you will look into this method!