Security Operations Integration- Email Search and Delete capability

The Email Search and Delete capability returns the number of threat emails from an email server search and, optionally, returns details for each email found. After the email search is completed, you can delete the emails.

The Email Search and Delete capability has one flow that executes the email search and delete processes.

주:

If no implementations are available, capability actions are not displayed in product menus. Additionally, if none of the Email Search and Delete capability implementations are active, the Email Search related link on a security incident is not displayed.

• Security Operations Integration - Email Search and Delete flow
  The Security Operations Integration - Email Search and Delete flow returns the number of threat emails from an email server search and, optionally, return details for each email found. After the email search is completed, you can delete the emails.

관련 개념

• Security Operations Integration- Block Request capability
• Security Operations Integration- Enrich CI capability
• Security Operations Integration- Enrich Observable capability
• Security Operations Integration- Get Network Statistics capability
• Security Operations Integration- Get Running Processes capability
• Security Operations Integration- Isolate Host capability
• Security Operations Integration- Publish to Watchlist capability
• Security Operations Integration- Sightings Search capability
• Security Operations Integration - Threat Lookup capability

관련 태스크

• Change the order of flow execution