- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Import attachement from mail
Hello guys!
i have a scenario to trigger playbook to extract IOCs from file, so i follow:
1- create an indicator with type file
2- import file to indicator module
3- write playbook to extract IOCs
Now, i want to import that file from MAIL to fully automated my whole playbook
anyone has an idea to do that.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello, yes that process is possible. Where are these emails coming from? If you're pulling from something like exchange or graph mail, files will automatically be pulled out from the emails and created as IOC's.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have integrated with Exchange, I need to import them from the attached file.
please, mention the steps to have it done.
Thanks in advance!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Have you ran through the data ingestion wizard for exchange? Open the connector for Exchange, and Click "Configure Data Ingestion". Finish the rest of the steps in the wizard and then see if you start to see IOC's being created with attachments from your emails.
