Search And Delete Emails - EWS

This playbook searches EWS to identify and delete emails with similar attributes of a malicious email.

Pack

MicrosoftExchangeOnPremise

Tasks

11

Inputs

• From — The value of the malicious email's "From" attribute.
• Subject — The value of the malicious email's "Subject" attribute.
• AttachmentName — The value of the malicious email's "AttachmentName" attribute.
• SearchThisWeek — Limit the search to the current week (true/false).
• Limit — The maximum number of search results.
• DeleteType — The deletion type (trash, soft, or hard).

Commands used

• ews-delete-items
• ews-search-mailboxes