Gmail - Incoming Mapper - Email Communication
Maps incoming Gmail email message fields.
Email Communication Mapper (In)
Details
| ID | fd0fde44-a619-4273-8c70-569f6620d759 |
|---|---|
| Type | mapping-incoming |
| Version | -1 |
| From Version | 6.0.0 |
| Default Incident Type | — |
| Feed | No |
{ "description": "Maps incoming Gmail email message fields.", "feed": false, "id": "fd0fde44-a619-4273-8c70-569f6620d759", "mapping": { "Email Communication": { "dontMapEventToLabels": false, "internalMapping": { "Attachment Count": { "complex": { "accessor": "", "filters": [ ], "root": "Attachments", "transformers": [ { "args": { }, "operator": "count" } ] }, "simple": "" }, "Attachment Extension": { "complex": { "accessor": "", "filters": [ ], "root": "Attachment Names", "transformers": [ { "args": { "delimiter": { "isContext": false, "value": { "complex": null, "simple": "," } } }, "operator": "splitAndTrim" }, { "args": { "regex": { "isContext": false, "value": { "complex": null, "simple": ".*\\." } }, "replaceWith": { "isContext": false, "value": null } }, "operator": "replaceMatch" } ] }, "simple": "" }, "Attachment ID": { "complex": null, "simple": "Attachments.ID" }, "Attachment Name": { "complex": { "accessor": "", "filters": [ ], "root": "Attachment Names", "transformers": [ ] }, "simple": "" }, "Email BCC": { "complex": { "accessor": "", "filters": [ ], "root": "Bcc", "transformers": [ { "args": { "separator": { "isContext": false, "value": { "simple": "," } } }, "operator": "join" } ] }, "simple": "" }, "Email Body": { "complex": { "accessor": "", "filters": [ ], "root": "Body", "transformers": [ ] }, "simple": "" }, "Email Body Format": { "complex": { "accessor": "", "filters": [ ], "root": "Format", "transformers": [ ] }, "simple": "" }, "Email Body HTML": { "complex": null, "simple": "Html" }, "Email CC": { "complex": { "accessor": "", "filters": [ ], "root": "Cc", "transformers": [ { "args": { "separator": { "isContext": false, "value": { "simple": "," } } }, "operator": "join" } ] }, "simple": "" }, "Email From": { "complex": { "accessor": "", "filters": [ ], "root": "From", "transformers": [ ] }, "simple": "" }, "Email HTML": { "complex": null, "simple": "Html" }, "Email Latest Message": { "complex": { "accessor": "Value", "filters": [ [ { "ignoreCase": true, "left": { "isContext": true, "value": { "complex": null, "simple": "Headers.Name" } }, "operator": "isEqualString", "right": { "isContext": false, "value": { "complex": null, "simple": "Message-Id" } } } ] ], "root": "Headers", "transformers": [ ] }, "simple": "" }, "Email Message ID": { "complex": { "accessor": "", "filters": [ ], "root": "ID", "transformers": [ ] }, "simple": "" }, "Email Subject": { "complex": { "accessor": "", "filters": [ ], "root": "Subject", "transformers": [ ] }, "simple": "" }, "Email To": { "complex": { "accessor": "", "filters": [ ], "root": "To", "transformers": [ { "args": { "separator": { "isContext": false, "value": { "simple": "," } } }, "operator": "join" } ] }, "simple": "" } } }, "Phishing": { "dontMapEventToLabels": false, "internalMapping": { "Attachment Count": { "complex": { "accessor": "", "filters": [ ], "root": "Attachments", "transformers": [ { "args": { }, "operator": "count" } ] }, "simple": "" }, "Attachment Extension": { "complex": { "accessor": "", "filters": [ ], "root": "Attachment Names", "transformers": [ { "args": { "delimiter": { "isContext": false, "value": { "complex": null, "simple": "," } } }, "operator": "splitAndTrim" }, { "args": { "regex": { "isContext": false, "value": { "complex": null, "simple": ".*\\." } }, "replaceWith": { "isContext": false, "value": null } }, "operator": "replaceMatch" } ] }, "simple": "" }, "Attachment Name": { "complex": { "accessor": "", "filters": [ ], "root": "Attachment Names", "transformers": [ ] }, "simple": "" }, "Email BCC": { "complex": { "accessor": "", "filters": [ ], "root": "Bcc", "transformers": [ { "args": { "separator": { "isContext": false, "value": { "simple": "," } } }, "operator": "join" } ] }, "simple": "" }, "Email Body": { "complex": { "accessor": "", "filters": [ ], "root": "Body", "transformers": [ ] }, "simple": "" }, "Email Body Format": { "complex": { "accessor": "", "filters": [ ], "root": "Format", "transformers": [ ] }, "simple": "" }, "Email CC": { "complex": { "accessor": "", "filters": [ ], "root": "Cc", "transformers": [ { "args": { "separator": { "isContext": false, "value": { "simple": "," } } }, "operator": "join" } ] }, "simple": "" }, "Email From": { "complex": { "accessor": "", "filters": [ ], "root": "From", "transformers": [ ] }, "simple": "" }, "Email HTML": { "complex": null, "simple": "Html" }, "Email Message ID": { "complex": { "accessor": "", "filters": [ ], "root": "ID", "transformers": [ ] }, "simple": "" }, "Email Subject": { "complex": { "accessor": "", "filters": [ ], "root": "Subject", "transformers": [ ] }, "simple": "" }, "Email Labels": { "complex": null, "simple": "Labels" }, "Email To": { "complex": { "accessor": "", "filters": [ ], "root": "To", "transformers": [ { "args": { "separator": { "isContext": false, "value": { "simple": "," } } }, "operator": "join" } ] }, "simple": "" } } } }, "name": "Gmail - Incoming Mapper - Email Communication", "type": "mapping-incoming", "version": -1, "fromVersion": "6.0.0" }