Gmail Single User - Incoming Mapper
Maps incoming Gmail phishing email messages fields.
Gmail Single User Mapper (In)
Details
| ID | Gmail Single User-mapper |
|---|---|
| Type | mapping-incoming |
| Version | -1 |
| From Version | 6.0.0 |
| Default Incident Type | — |
| Feed | No |
{ "id": "Gmail Single User-mapper", "name": "Gmail Single User - Incoming Mapper", "type": "mapping-incoming", "description": "Maps incoming Gmail phishing email messages fields.", "version": -1, "defaultIncidentType": "", "mapping": { "Phishing": { "internalMapping": { "Email HTML": { "complex": null, "simple": "Html" }, "Attachment Count": { "simple": "", "complex": { "root": "Attachments", "filters": [], "accessor": "", "transformers": [ { "operator": "count", "args": {} } ] } }, "Attachment Extension": { "simple": "", "complex": { "root": "Attachment Names", "filters": [], "accessor": "", "transformers": [ { "operator": "splitAndTrim", "args": { "delimiter": { "value": { "simple": ",", "complex": null }, "isContext": false } } }, { "operator": "replaceMatch", "args": { "regex": { "value": { "simple": ".*\\.", "complex": null }, "isContext": false }, "replaceWith": { "value": null, "isContext": false } } } ] } }, "Attachment Name": { "simple": "", "complex": { "root": "Attachment Names", "filters": [], "accessor": "", "transformers": [] } }, "Email BCC": { "simple": "", "complex": { "root": "Bcc", "filters": [], "accessor": "", "transformers": [] } }, "Email Body": { "simple": "", "complex": { "root": "Body", "filters": [], "accessor": "", "transformers": [] } }, "Email Body Format": { "simple": "", "complex": { "root": "Format", "filters": [], "accessor": "", "transformers": [] } }, "Email CC": { "simple": "", "complex": { "root": "Cc", "filters": [], "accessor": "", "transformers": [] } }, "Email From": { "simple": "", "complex": { "root": "From", "filters": [], "accessor": "", "transformers": [] } }, "Email Message ID": { "simple": "", "complex": { "root": "ID", "filters": [], "accessor": "", "transformers": [] } }, "Email Subject": { "simple": "", "complex": { "root": "Subject", "filters": [], "accessor": "", "transformers": [] } }, "Email To": { "simple": "", "complex": { "root": "To", "filters": [], "accessor": "", "transformers": [] } } }, "dontMapEventToLabels": false } }, "fromVersion": "6.0.0", "supportedModules": [ "agentix", "xsiam" ] }