Microsoft Exchange On-Premise EWS

This app performs email ingestion, investigative and containment actions on an on-premise Exchange installationBuilt by Splunk LLC

Default Version 3.4.3

September 17, 2021

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9

Rating

(0)

Support

Splunk Supported

Ranking

#1 in Email

This app performs email ingestion, investigative and containment actions on an on-premise Exchange installation

Supported actions

test connectivity: Validate the asset configuration for connectivity using supplied configuration
run query: Search emails
delete email: Delete emails
copy email: Copy an email to a folder
move email: Move an email to a folder
get email: Get an email from the server
list addresses: Get the email addresses that make up a Distribution List
lookup email: Resolve an Alias name or email address, into mailboxes
update email: Update an email on the server
on poll: Ingest emails from the server into Phantom