SymantecEmailSecurity v1.0.5
Symantec Email Security.cloud is a hosted service that filters email messages and helps protect organizations from malware (including targeted attacks and phishing), spam, and unwanted bulk email. The service offers encryption and data protection options to help control sensitive information sent by email and supports multiple mailbox types from various vendors.
Incident fields (11)
- Symantec ESC Detection Method
- Symantec ESC Email Attachment
- Symantec ESC Email Body
- Symantec ESC Email Direction
- Symantec ESC Email Malware Category
- Symantec ESC Email Malware Name
- Symantec ESC Email Recipient
- Symantec ESC Email Sender
- Symantec ESC Email Subject
- Symantec ESC Quarantine Rule
- Symantec ESC Security Service
Incident types (2)
Integrations (1)
Layouts (1)
README
Enhancing Email Security with Comprehensive Tools
This integration empowers security teams to effectively manage and monitor email threats.
From IOC handling to real-time email queue monitoring and actionable quarantine operations, these features support seamless workflows for enhanced response and compliance.
Below are the key functionalities this pack provides:
- IOC Management: Manage IOCs for email threats across domains: list, add, update, delete, or renew IOCs.
- Data Feeds: Retrieve threat data (e.g., malware, spam, clicks) for insights into email security events.
- Email Queue Monitoring: View queue statistics per domain to monitor email processing and delays.
- Quarantine Actions: List, preview, release, or delete quarantined emails to manage potentially harmful content.
- Allow and Block Lists: Maintain lists for permitted or restricted senders/domains: retrieve, add/update, or delete items.
- Fetch Incidents: Auto-fetch incidents and quarantine-specific threats to streamline response and compliance.