Other
Aperçu
Polls a Microsoft 365/Exchange Online mailbox via the Microsoft Graph API and ingests cyber threat intelligence reports received via email into OpenCTI as structured CTI reports with TLP markings.
The Email Intel Microsoft Connector enables the ingestion of cyber threat intelligence reports received via email into the OpenCTI platform.
This connector allows organizations to automate the collection of intelligence shared through email by regularly polling a mailbox and transforming each message into an OpenCTI report.
Using the Microsoft Graph API,the connector polls a dedicated Microsoft 365/Exchange Online mailbox, transforms every message (plus accepted attachments) into an OpenCTI Report, and tags it with the chosen TLP.