EWS for Office 365

This app ingests emails from a mailbox in addition to supporting various investigative and containment actions on an Office 365 serviceBuilt by Splunk LLC

Default Version 2.9.0

April 4, 2022

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1

Rating

(0)

Support

Splunk Supported

Ranking

#1 in Email

This app ingests emails from a mailbox in addition to supporting various investigative and containment actions on an Office 365 service

Supported actions

test connectivity: Validate the asset configuration for connectivity
run query: Search emails
delete email: Delete emails
copy email: Copy an email to a folder
move email: Move an email to a folder
block sender: Add the sender email into the block list
unblock sender: Remove the sender email from the block list
get email: Get an email from the server
list addresses: Get the email addresses that make up a Distribution List
lookup email: Resolve an Alias name or email address, into mailboxes
update email: Update an email on the server
trace email: Get message trace from the server
on poll: Action handler for the ingest functionality