Search And Delete Emails - Gmail

This playbook searches Gmail to identify and delete emails with similar attributes to the malicious email.

Gmail · 15 tasks · 6 inputs · 0 outputs

Inputs

  • From — The value of the malicious email's "From" attribute.
  • Subject — The value of the malicious email's "Subject" attribute.
  • AttachmentName — The value of the malicious email's "AttachmentName" attribute.
  • Limit — The maximum number of search results.
  • DeleteType — The deletion type (trash or permanent). For permanent choose 'True'.
  • SearchThisWeek — Limit the search to the current week (true/false).

Commands used

extractIndicators gmail-delete-mail gmail-search-all-mailboxes

Flowchart

yes yes yes Yes Start Start Is Gmail enabled? Is Gmail enabled? Search all mailboxes in Gmail Search all mailboxes in G... Search Gmail for similar emails last 7 days - gmail-search-all-mailboxes Search Gmail for similar ... gmail-search-all-mailboxes Delete emails from Gmail - gmail-delete-mail Delete emails from Gmail gmail-delete-mail Were similar emails found? Were similar emails found? Delete similar emails Delete similar emails Done Done Search only a week time range? Search only a week time r... Set time range - GetTime Set time range GetTime Search Gmail for similar emails - gmail-search-all-mailboxes Search Gmail for similar ... gmail-search-all-mailboxes Should the found emails be deleted from Gmail? Should the found emails b... Extract similar emails - Set Extract similar emails Set Extract "To" emails - extractIndicators Extract "To" emails extractIndicators Remove duplicates - Set Remove duplicates Set