EWS - Classifier

Classifies EWS phishing email messages.

Microsoft Exchange On-Premise Classification

Details

IDEWS v2
Typeclassification
Version-1
From Version6.0.0
Default Incident Type—
FeedNo

Key Type Map

KeyIncident Type
High Phishing
Low Phishing
Normal Phishing

Source

classifier-EWS_v2.json
Download History Raw 
{
    "id": "EWS v2",
    "name": "EWS - Classifier",
    "type": "classification",
    "description": "Classifies EWS phishing email messages.",
    "version": -1,
    "defaultIncidentType": "",
    "transformer": {
        "simple": "importance",
        "complex": null
    },
    "keyTypeMap": {
        "High": "Phishing",
        "Low": "Phishing",
        "Normal": "Phishing"
    },
    "fromVersion": "6.0.0",
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}