BuildEWSQuery

Details

ID	`BuildEWSQuery`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Tags	ews

README

Returns an EWS query according to the automation’s arguments.

Script Data

Name	Description
Script Type	python
Tags	ews

Inputs

Argument Name	Description
from	The value of the email’s From attribute.
subject	The value of the email’s Subject attribute.
attachmentName	The value of the email’s attachmentName attribute.
body	The value of the email’s Body attribute.
searchThisWeek	Whether to limit the search to the current week. Must be “true” or “false”.
stripSubject	Removes the prefix from the subject of reply and forward messages (e.g., FW:).
escapeSemicolons	Whether to escape the semicolons. Must be “true” or “false”.

Outputs

Path	Description	Type
EWS.Query	The result query.	string

Source

BuildEWSQuery.py BuildEWSQuery_test.py BuildEWSQuery.yml

Download History Raw

commonfields:
  id: BuildEWSQuery
  version: -1
name: BuildEWSQuery
script: ''
type: python
subtype: python3
tags:
- ews
comment: Returns an EWS query according to the automation's arguments.
system: true
args:
- name: from
  default: true
  description: The value of the email's "From" attribute.
- name: subject
  description: The value of the email's "Subject" attribute.
- name: attachmentName
  description: The value of the email's "attachmentName" attribute.
- name: body
  description: The value of the email's "Body" attribute.
- name: searchThisWeek
  auto: PREDEFINED
  predefined:
  - "true"
  - "false"
  description: Limit the search to the current week (true/false).
  defaultValue: "true"
- name: stripSubject
  auto: PREDEFINED
  predefined:
  - "true"
  - "false"
  description: Removes the prefix from the subject of reply and forward messages (e.g., FW:).
  defaultValue: "true"
- name: escapeColons
  auto: PREDEFINED
  predefined:
  - "true"
  - "false"
  description: Escape from colon (true/false).
  defaultValue: "false"
outputs:
- contextPath: EWS.Query
  description: The result query.
  type: string
scripttarget: 0
tests:
- buildewsquery_test
fromversion: 5.0.0
dockerimage: demisto/python3:3.12.13.10116658
supportedModules:
- agentix
- xsiam
- edr
- cloud
- cloud_runtime_security