EWS - Classifier

Classifies EWS phishing email messages.

Microsoft Exchange On-Premise Classification

Details

ID	`EWS v2`
Type	classification
Version	-1
From Version	6.0.0
Default Incident Type	—
Feed	No

Key Type Map

Key	Incident Type
`High`	Phishing
`Low`	Phishing
`Normal`	Phishing

Source

classifier-EWS_v2.json

Download History Raw

{
    "id": "EWS v2",
    "name": "EWS - Classifier",
    "type": "classification",
    "description": "Classifies EWS phishing email messages.",
    "version": -1,
    "defaultIncidentType": "",
    "transformer": {
        "simple": "importance",
        "complex": null
    },
    "keyTypeMap": {
        "High": "Phishing",
        "Low": "Phishing",
        "Normal": "Phishing"
    },
    "fromVersion": "6.0.0",
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}