EWS Mail Sender Deprecated

Exchange Web Services mail sender. Note: this integration supports Office 365 basic authentication only. If you are using Office 365, we recommend using the EWS O365 Integration instead, which supports modern authentication (oauth2). Deprecated. Use EWS v2 instead

Email · Microsoft Exchange On-Premise

Details

IDEWS Mail Sender
ProviderMicrosoft
CategoryEmail
From Version5.0.0
Docker Imagedemisto/py3ews:1.0.0.47270
Supported ModulesAgentix Cloud Runtime Security Cloud Posture Security XSIAM EDR Cortex Cloud

README

Exchange Web Services and Office 365 Email sender.

Configure EWS Mail Sender in Cortex

Parameter Description Required
ewsServer Exchange URL or Server IP address True
credentials Authentication: Email address (for Office 365) or DOMAIN\USERNAME (e.g. XSOAR.INT\admin) True
defaultServerVersion Server Version (2007, 2010, 2010_SP2, 2013, or 2016) True
authType Authentication Type (NTLM, Basic, or Digest). For Office 365 use Basic. True
insecure Trust any certificate (not secure) False
proxy Use system proxy settings False
impersonation Has impersonation rights False
mailbox Sender Mailbox False
Single engine If relevant, select the engine that acts as a proxy to the server. Engines are used when you need to access a remote network segments and there are network devices such as proxies, firewalls, etc. that prevent the Cortex XSOAR server from accessing the remote networks. For more information on Cortex XSOAR engines see:
Cortex XSOAR 6.13 - Engines
Cortex XSOAR 8 Cloud- Engines
Cortex XSOAR 8.7 On-prem - Engines
 False

Top Use-cases

  • Send notifications to external users.
  • Send an email asking for a response to be returned as part of a playbook. See Receiving an email reply

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

send-mail

Sends an email using EWS.

Base Command

send-mail

Input

Argument Name Description Required
to A CSV list of email addresses for the ‘to’ field. Required
cc A CSV list of email addresses for the ‘cc’ field. Optional
bcc A CSV list of email addresses for the ‘bcc’ field. Optional
subject Subject for the email to be sent. Required
replyTo The email address specified in the ‘reply to’ field. Optional
body The contents (body) of the email to send. Optional
htmlBody HTML formatted content (body) of the email to be sent. This argument overrides the “body” argument. Optional
attachIDs A CSV list of War Room entry IDs that contain files, and are used to attach files to the outgoing email. For example: attachIDs=15@8,19@8. Optional
attachNames A CSV list of names of attachments to send. Should be the same number of elements as attachIDs. Optional
attachCIDs A CSV list of CIDs to embed attachments within the email itself. Optional
from_address The email address from which to reply. Optional

Context Output

There is no context output for this command.

Command Example

!send-mail body="hello this is a test" subject=Hi to=avishai@demistodev.onmicrosoft.com

Human Readable Output

Sent email

attachments from subject to
  avishai@demistodev.onmicrosoft.com Hi avishai@demistodev.onmicrosoft.com

reply-mail

Replies to an email using EWS.

Base Command

reply-mail

Input

Argument Name Description Required
inReplyTo ID of the item to reply to. Required
to A CSV list of email addresses for the ‘to’ field. Required
cc A CSV list of email addresses for the ‘cc’ field. Optional
bcc A CSV list of email addresses for the ‘bcc’ field. Optional
subject Subject for the email to be sent. Optional
body The contents (body) of the email to send. Optional
htmlBody HTML formatted content (body) of the email to be sent. This argument overrides the “body” argument. Optional
attachIDs A CSV list of War Room entry IDs that contain files, and are used to attach files to the outgoing email. For example: attachIDs=15@8,19@8. Optional
attachNames A CSV list of names of attachments to send. Should be the same number of elements as attachIDs. Optional
attachCIDs A CSV list of CIDs to embed attachments within the email itself. Optional

Context Output

There is no context output for this command.

Command Example

!reply-mail item_id=AAMkAGY3OTQyMzMzLWYxNjktNDE0My05NmZhLWQ5MGY1YjIyNzBkNABGAAAAAACYCKjWAnXBTrnhgWJCcLX7BwDrxRwRjq/zTrN6vWSzK4OWAAAAAAEMAADrxRwRjq/zTrN6vWSzK4OWAAPYQGFeAAA= body=hello subject=hi to="avishai@demistodev.onmicrosoft.com"

Human Readable Output

Sent email

attachments from subject to
  avishai@demistodev.onmicrosoft.com hi avishai@demistodev.onmicrosoft.com

Configuration parameters

  • ewsServer — Exchange URL or Server IP address (required)
  • credentials — Authentication: Email address (for Office 365) or DOMAIN\USERNAME (e.g. DEMISTO.INT\admin) (required)
  • defaultServerVersion — Server Version (2007, 2010, 2010_SP2, 2013, or 2016) (required)
  • authType — Authentication Type (NTLM, Basic, or Digest). For Office 365 use Basic. (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • impersonation — Has impersonation rights
  • mailbox — Sender Mailbox

Commands (2)

  • reply-mail

    Replies to an email using EWS.

  • send-mail

    Sends an email using EWS.

Source

EWSMailSender.py EWSMailSender_test.py EWSMailSender.yml EWSMailSender_description.md command_examples.txt
Download History Raw 
commonfields:
  id: EWS Mail Sender
  version: -1
sectionorder:
- Connect
- Collect
name: EWS Mail Sender
display: EWS Mail Sender (Deprecated)
deprecated: true
category: Email
provider: Microsoft
description: 'Exchange Web Services mail sender. Note: this integration supports Office 365 basic authentication only. If you are using Office 365, we recommend using the EWS O365 Integration instead, which supports modern authentication (oauth2). Deprecated. Use EWS v2 instead'
configuration:
- display: Exchange URL or Server IP address
  name: ewsServer
  defaultvalue: https://outlook.office365.com/EWS/Exchange.asmx/
  type: 0
  required: true
  section: Connect
- display: 'Authentication: Email address (for Office 365) or DOMAIN\USERNAME (e.g. DEMISTO.INT\admin)'
  name: credentials
  defaultvalue: ""
  type: 9
  required: true
  section: Connect
- display: Server Version (2007, 2010, 2010_SP2, 2013, or 2016)
  name: defaultServerVersion
  defaultvalue: "2013"
  type: 0
  required: true
  section: Connect
- display: Authentication Type (NTLM, Basic, or Digest). For Office 365 use Basic.
  name: authType
  defaultvalue: Basic
  type: 0
  required: true
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Use system proxy settings
  name: proxy
  defaultvalue: "false"
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Has impersonation rights
  name: impersonation
  defaultvalue: "false"
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Sender Mailbox
  name: mailbox
  defaultvalue: ""
  type: 0
  section: Connect
  advanced: true
  required: false
script:
  script: ''
  type: python
  subtype: python3
  commands:
  - name: send-mail
    arguments:
    - name: to
      required: true
      description: A CSV list of email addresses for the 'to' field.
    - name: cc
      description: A CSV list of email addresses for the 'cc' field.
    - name: bcc
      description: A CSV list of email addresses for the 'bcc' field.
    - name: subject
      required: true
      description: Subject for the email to be sent.
    - name: replyTo
      description: The email address specified in the 'reply to' field.
    - name: body
      description: The contents (body) of the email to send.
    - name: htmlBody
      description: HTML formatted content (body) of the email to be sent. This argument overrides the "body" argument.
    - name: attachIDs
      description: 'A CSV list of War Room entry IDs that contain files, and are used to attach files to the outgoing email. For example: attachIDs=15@8,19@8.'
      isArray: true
    - name: attachNames
      description: A CSV list of names of attachments to send. Should be the same number of elements as attachIDs.
      isArray: true
    - name: attachCIDs
      description: A CSV list of CIDs to embed attachments within the email itself.
      isArray: true
    - name: raw_message
      description: Raw email message from MimeContent type.
    - description: The email address from which to reply.
      name: from
    description: Sends an email using EWS.
  - name: reply-mail
    arguments:
    - name: inReplyTo
      required: true
      description: ID of the item to reply to.
    - name: to
      required: true
      description: A CSV list of email addresses for the 'to' field.
    - name: cc
      description: A CSV list of email addresses for the 'cc' field.
    - name: bcc
      description: A CSV list of email addresses for the 'bcc' field.
    - name: subject
      description: Subject for the email to be sent.
    - name: body
      description: The contents (body) of the email to be sent.
    - name: htmlBody
      description: HTML formatted content (body) of the email to be sent. This argument overrides the "body" argument.
    - name: attachIDs
      description: 'A CSV list of War Room entry IDs that contain files, and are used to attach files to the outgoing email. For example: attachIDs=15@8,19@8.'
      isArray: true
    - name: attachNames
      description: A CSV list of names of attachments to send. Should be the same number of elements as attachIDs.
      isArray: true
    - name: attachCIDs
      description: A CSV list of CIDs to embed attachments within the email itself.
      isArray: true
    description: Replies to an email using EWS.
  dockerimage: demisto/py3ews:1.0.0.47270
tests:
- "EWS Mail Sender Test"
- "EWS Mail Sender Test 2"
fromversion: 5.0.0