Email Cases Importer
Supported by community
Adversary & Campaign Insights
Detection & Response Enablement
Overview
Email to Incident Response Case connector with multi-protocol support
Polls email inboxes (IMAP, Microsoft Graph, Gmail, EWS) for emails from specific senders matching configurable subject filters. Creates Incident Response Cases in OpenCTI, grouping email thread replies into the same case. Extracts and decrypts attachments (7z, zip, rar, xlsx, pdf) using passwords found in email bodies. Supports extensible attachment handlers.
Basic information
Connectors
7.260807.0
1