Gmail Single User - Incoming Mapper

Maps incoming Gmail phishing email messages fields.

Gmail Single User Mapper (In)

Details

IDGmail Single User-mapper
Typemapping-incoming
Version-1
From Version6.0.0
Default Incident Type
FeedNo
{
    "id": "Gmail Single User-mapper",
    "name": "Gmail Single User - Incoming Mapper",
    "type": "mapping-incoming",
    "description": "Maps incoming Gmail phishing email messages fields.",
    "version": -1,
    "defaultIncidentType": "",
    "mapping": {
        "Phishing": {
            "internalMapping": {
                "Email HTML": {
                    "complex": null,
                    "simple": "Html"
                },
                "Attachment Count": {
                    "simple": "",
                    "complex": {
                        "root": "Attachments",
                        "filters": [],
                        "accessor": "",
                        "transformers": [
                            {
                                "operator": "count",
                                "args": {}
                            }
                        ]
                    }
                },
                "Attachment Extension": {
                    "simple": "",
                    "complex": {
                        "root": "Attachment Names",
                        "filters": [],
                        "accessor": "",
                        "transformers": [
                            {
                                "operator": "splitAndTrim",
                                "args": {
                                    "delimiter": {
                                        "value": {
                                            "simple": ",",
                                            "complex": null
                                        },
                                        "isContext": false
                                    }
                                }
                            },
                            {
                                "operator": "replaceMatch",
                                "args": {
                                    "regex": {
                                        "value": {
                                            "simple": ".*\\.",
                                            "complex": null
                                        },
                                        "isContext": false
                                    },
                                    "replaceWith": {
                                        "value": null,
                                        "isContext": false
                                    }
                                }
                            }
                        ]
                    }
                },
                "Attachment Name": {
                    "simple": "",
                    "complex": {
                        "root": "Attachment Names",
                        "filters": [],
                        "accessor": "",
                        "transformers": []
                    }
                },
                "Email BCC": {
                    "simple": "",
                    "complex": {
                        "root": "Bcc",
                        "filters": [],
                        "accessor": "",
                        "transformers": []
                    }
                },
                "Email Body": {
                    "simple": "",
                    "complex": {
                        "root": "Body",
                        "filters": [],
                        "accessor": "",
                        "transformers": []
                    }
                },
                "Email Body Format": {
                    "simple": "",
                    "complex": {
                        "root": "Format",
                        "filters": [],
                        "accessor": "",
                        "transformers": []
                    }
                },
                "Email CC": {
                    "simple": "",
                    "complex": {
                        "root": "Cc",
                        "filters": [],
                        "accessor": "",
                        "transformers": []
                    }
                },
                "Email From": {
                    "simple": "",
                    "complex": {
                        "root": "From",
                        "filters": [],
                        "accessor": "",
                        "transformers": []
                    }
                },
                "Email Message ID": {
                    "simple": "",
                    "complex": {
                        "root": "ID",
                        "filters": [],
                        "accessor": "",
                        "transformers": []
                    }
                },
                "Email Subject": {
                    "simple": "",
                    "complex": {
                        "root": "Subject",
                        "filters": [],
                        "accessor": "",
                        "transformers": []
                    }
                },
                "Email To": {
                    "simple": "",
                    "complex": {
                        "root": "To",
                        "filters": [],
                        "accessor": "",
                        "transformers": []
                    }
                }
            },
            "dontMapEventToLabels": false
        }
    },
    "fromVersion": "6.0.0",
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}