Mail Listener - POP3 - Incoming Mapper

MailListener - POP3 Mapper (In)

Details

IDMail Listener - POP3 - Incoming Mapper
Typemapping-incoming
Version-1
From Version6.0.0
Default Incident TypePhishing
FeedNo
{
    "defaultIncidentType": "Phishing",
    "description": "",
    "feed": false,
    "id": "Mail Listener - POP3 - Incoming Mapper",
    "mapping": {
        "Phishing": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "Attachment Count": {
                    "complex": {
                        "filters": [],
                        "root": "attachments",
                        "transformers": [
                            {
                                "operator": "count"
                            }
                        ]
                    }
                },
                "Attachment Name": {
                    "complex": {
                        "accessor": "name",
                        "filters": [],
                        "root": "attachments",
                        "transformers": [
                            {
                                "args": {
                                    "separator": {
                                        "value": {
                                            "simple": ","
                                        }
                                    }
                                },
                                "operator": "join"
                            }
                        ]
                    }
                },
                "Email BCC": {
                    "complex": {
                        "filters": [],
                        "root": "bcc",
                        "transformers": [
                            {
                                "args": {
                                    "separator": {
                                        "value": {
                                            "simple": ","
                                        }
                                    }
                                },
                                "operator": "join"
                            }
                        ]
                    }
                },
                "Email Body": {
                    "complex": {
                        "filters": [],
                        "root": "body",
                        "transformers": []
                    }
                },
                "Email CC": {
                    "complex": {
                        "filters": [],
                        "root": "cc",
                        "transformers": [
                            {
                                "args": {
                                    "separator": {
                                        "value": {
                                            "simple": ","
                                        }
                                    }
                                },
                                "operator": "join"
                            }
                        ]
                    }
                },
                "Email From": {
                    "complex": {
                        "filters": [],
                        "root": "from",
                        "transformers": []
                    }
                },
                "Email In Reply To": {
                    "complex": {
                        "filters": [],
                        "root": "in-reply-to",
                        "transformers": [
                            {
                                "args": {
                                    "separator": {
                                        "value": {
                                            "simple": ","
                                        }
                                    }
                                },
                                "operator": "join"
                            }
                        ]
                    }
                },
                "Email Message ID": {
                    "complex": {
                        "filters": [],
                        "root": "message-id",
                        "transformers": []
                    }
                },
                "Email Return Path": {
                    "complex": {
                        "filters": [],
                        "root": "return-path",
                        "transformers": []
                    }
                },
                "Email Subject": {
                    "complex": {
                        "filters": [],
                        "root": "subject",
                        "transformers": []
                    }
                },
                "Email To": {
                    "complex": {
                        "filters": [],
                        "root": "to",
                        "transformers": [
                            {
                                "args": {
                                    "delimiter": {
                                        "value": {
                                            "simple": ","
                                        }
                                    }
                                },
                                "operator": "split"
                            }
                        ]
                    }
                },
                "Email To Count": {
                    "complex": {
                        "filters": [],
                        "root": "to",
                        "transformers": [
                            {
                                "args": {
                                    "delimiter": {
                                        "value": {
                                            "simple": ","
                                        }
                                    }
                                },
                                "operator": "split"
                            },
                            {
                                "operator": "count"
                            }
                        ]
                    }
                }
            }
        }
    },
    "name": "Mail Listener - POP3 - Incoming Mapper",
    "type": "mapping-incoming",
    "version": -1,
    "fromVersion": "6.0.0"
}