Google Vault - Display Results
This is a playbook for queuing and displaying vault search result
- Pack
- GoogleVault
- Tasks
- 13
Inputs
- pollInterval — Interval to check export status (minutes)
- pollTimeout — Timeout to terminate the poll (minutes)
- maxResultForDisplay — The maximal number of result to be displayed
- downloadFile — If set to true the export file created will be downloaded into the War Room
- ExportID — Export ID
- MatterID — Matter ID
- SearchtType — Type of Search could be one of: 'Drive', 'Groups' or 'Mail'
Outputs
- GoogleVault.Matter.Export.MatterID — Matter ID
- GoogleVault.Matter.Export.ExportID — Export ID
- GoogleVault.Matter.Export.Name — Export's name
- GoogleVault.Matter.Export.CreateTime — Export's creation time
- GoogleVault.Matter.Export.Results.CC — CC of the mail
- GoogleVault.Matter.Export.Results.BCC — BCC of the mail
- GoogleVault.Matter.Export.Results.DateSent — The date the email was sent
- GoogleVault.Matter.Export.Results.From — The sender of the email
- GoogleVault.Matter.Export.Results.Subject — The subject of the email
- GoogleVault.Matter.Export.Results.DateReceived — The date the email was received
- GoogleVault.Matter.Export.Results.To — The address the email was sent to
- GoogleVault.Matter.Export.Status — Export Status (COMPLETED,FAILED,IN_PROGRESS)
- GoogleVault.Matter.Export.BucketName — Bucket holder name for this export
- GoogleVault.Matter.Export.DownloadID — ID to be used by the download-export command
- GoogleVault.Matter.Export.ViewID — ID to be used by the get-X-results command (X=drive/mail/groups)
- GoogleVault.Matter.Export — Export object
Commands used
- gvault-download-results
- gvault-export-status
- gvault-get-drive-results
- gvault-get-groups-results
- gvault-get-mail-results