Ironscales Event Collector

Use this integration to fetch email security incidents from Ironscales as XSIAM events.

Email · Ironscales Event Collector

Configuration parameters

  • url — Server URL (e.g., https://appapi.ironscales.com) (required)
  • apikey — (required)
  • company_id — Company ID (required)
  • scopes — Scopes (e.g., "company.all") (required)
  • max_fetch — Maximum number of events per fetch
  • first_fetch — First fetch
  • collect_all_events — Collect all events
  • mailbox_enrichment — Fetch mailbox mitigation details
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (1)

  • ironscales-get-events

    Gets events from Ironscales. This command is intended for development and debugging purposes and is to be used with caution as it may create duplicate events, exceed API request rate limits, and disrupt the fetch events mechanism.