Email

Details

ID	`emailRep`
From Version	5.0.0
Reputation Command	`email`
Format Script	ExtractEmailV2
Context Path	`Account.Email(val.Address && val.Address === obj.Address)`
Layout	Email Indicator

Detection Regex

(?:(?:\\|\^{3})u[a-f\d]{4})?(?P<localpart>[\p{L}\d.!#$%&'*+/=?^_\xe60{}~-][\p{L}\d.!#$%&'*+/=?^_\xe60{|}~-]{0,63})\[?@]?(?P<domain>[\p{L}\d-]{1,255}(?:\[?\.]?(?:[\p{L}\d-]{2,}))*(?:\[?\.]?(?P<tld>[\p{L}]{2,})))

Enhancement Scripts

EmailReputation

Source

reputation-email.json

Download History Raw

{
  "id": "emailRep",
  "version": -1,
  "fromVersion": "5.0.0",
  "modified": "2019-07-18T08:56:47.982384118Z",
  "sortValues": null,
  "commitMessage": "",
  "shouldPublish": false,
  "shouldCommit": false,
  "regex": "(?:(?:\\\\|\\^{3})u[a-f\\d]{4})?(?P<localpart>[\\p{L}\\d.!#$%&'*+/=?^_\\xe60{}~-][\\p{L}\\d.!#$%&'*+/=?^_\\xe60{|}~-]{0,63})\\[?@]?(?P<domain>[\\p{L}\\d-]{1,255}(?:\\[?\\.]?(?:[\\p{L}\\d-]{2,}))*(?:\\[?\\.]?(?P<tld>[\\p{L}]{2,})))",
  "details": "Email",
  "prevDetails": "Email",
  "reputationScriptName": "",
  "reputationCommand": "email",
  "enhancementScriptNames": [
    "EmailReputation"
  ],
  "system": true,
  "locked": false,
  "disabled": false,
  "file": false,
  "updateAfter": 0,
  "mergeContext": false,
  "formatScript": "ExtractEmailV2",
  "contextPath": "Account.Email(val.Address \u0026\u0026 val.Address === obj.Address)",
  "contextValue": "Address",
  "excludedBrands": [],
  "defaultMapping": {
    "blocked": {
      "simple": "",
      "complex": {
        "root": "Account",
        "filters": [],
        "accessor": "Blocked",
        "transformers": [
          {
            "operator": "uniq",
            "args": {}
          }
        ]
      }
    },
    "domainname": {
      "simple": "",
      "complex": {
        "root": "Account",
        "filters": [],
        "accessor": "Domain",
        "transformers": [
          {
            "operator": "uniq",
            "args": {}
          }
        ]
      }
    },
    "emailaddress": {
      "simple": "",
      "complex": {
        "root": "Account",
        "filters": [],
        "accessor": "Email.Address",
        "transformers": [
          {
            "operator": "uniq",
            "args": {}
          }
        ]
      }
    }
  },
  "manualMapping": null,
  "fileHashesPriority": null,
  "layout": "emailRep",
  "supportedModules": [
    "agentix",
    "xsiam"
  ]
}