Email Cases Importer
コミュニティの提供による
Adversary & Campaign Insights
Detection & Response Enablement
概要
Email to Incident Response Case connector with multi-protocol support
Polls email inboxes (IMAP, Microsoft Graph, Gmail, EWS) for emails from specific senders matching configurable subject filters. Creates Incident Response Cases in OpenCTI, grouping email thread replies into the same case. Extracts and decrypts attachments (7z, zip, rar, xlsx, pdf) using passwords found in email bodies. Supports extensible attachment handlers.