SendEmailReply

Send email reply This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: - For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script

python · Email Communication

Details

ID	`SendEmailReply`
Language	python
From Version	5.0.0
Docker Image	`demisto/bs4-py3:1.0.0.10120494`

README

The script is a part of the Email Communication pack.

The script sends the email to the recipient’s list, including the following information:

The original email.
The name of the sender.
The person to reply to.
CC addresses, if they exist.
BCC addresses, if they exist (Email Threads layout only)
Attachments, if they exist.

For the “Email Communication” layout:

The email body is taken from the incident ‘notes,’ and the email subject will contain the incident ID and the incident name.

For the “Email Threads” layout:

Email message details (recipients, subject, email body, etc.) are set in Incident fields, as well as extracted from any previous messages on the same email thread.
Outbound email subjects will include a unique message ID and a custom subject line set when the first message in the thread is created.
If you include any Markdown in the body, the script will send it as HTML even if body_type argument is set to “text”. To send the body without applying Markdown formatting, check the Send Body as Raw Text (No Markdown) checkbox.

Permissions

This automation runs using the default Limited User role, unless you explicitly change the permissions.
For more information, see the section about permissions here: For Cortex XSOAR 6, see the https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations for Cortex XSOAR 8 Cloud, see the https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script for Cortex XSOAR 8 On-prem, see the https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script.

Script Data

Name	Description
Script Type	python3
Tags
Cortex XSOAR Version	0.0.0

Inputs

Argument Name	Description
files	The context path for files.
attachment	The context path for attachments.
service_mail	The email address the emails are sent from.
mail_sender_instance	Name of the mail sender instance name for transmitting emails
new_thread	Specify whether to reply to an existing thread or start a new one. Default value of ‘n/a’ is for ‘Email Communication’ type incidents only
body_type	The type of the email body. Can be either HTML or plain text. Default is HTML.
reputation_calc_async	Whether to calculate the reputation asynchronously. Default is false.

Outputs

There are no outputs for this script.

Troubleshooting

Multi-tenant environments should be configured with the Cortex Rest API instance when using this
automation. Make sure the Use tenant parameter (in the Cortex Rest API integration) is checked
to ensure that API calls are made to the current tenant instead of the master tenant.

Source

SendEmailReply.py SendEmailReply_test.py SendEmailReply.yml

Download History Raw

args:
- defaultValue: ${File}
  description: Files.
  isArray: true
  name: files
- defaultValue: ${incident.attachment}
  description: Attachment.
  isArray: true
  name: attachment
- description: The mailbox from which emails are sent from the 3rd party integration.
  name: service_mail
- name: mail_sender_instance
  description: Name of the mail sender instance name for transmitting emails.
- name: new_thread
  auto: PREDEFINED
  predefined:
  - 'true'
  - 'false'
  - n/a
  description: Specify whether to reply to an existing thread or start a new one.  Default value of 'n/a' is for 'Email Communication' type incidents only.
  defaultValue: n/a
- name: subject_include_incident_id
  description: Include the Incident ID within the email subject.
  defaultValue: 'false'
- name: reputation_calc_async
  auto: PREDEFINED
  predefined:
  - 'true'
  - 'false'
  description: Specify whether to calculate the reputation in an asynchronous way.
  defaultValue: 'false'
- auto: PREDEFINED
  defaultValue: html
  description: 'The body type of the email. Can be: "text", or "HTML".'
  name: body_type
  predefined:
  - text
  - HTML
- description: The mailbox address to send the email from.
  name: from
- name: timezone
  defaultValue: UTC
  description: Timezone used for email thread timestamps (must be a valid IANA timezone such as UTC, Europe/London, or America/New_York; defaults to UTC if not specified or invalid).
comment: |-
  Send email reply
  This automation runs using the default Limited User role, unless you explicitly change the permissions.
  For more information, see the section about permissions here:
  - For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations 
  - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script
  - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
commonfields:
  id: SendEmailReply
  version: -1
enabled: true
name: SendEmailReply
script: ''
subtype: python3
system: true
type: python
fromversion: 5.0.0
dockerimage: demisto/bs4-py3:1.0.0.10120494
tests:
- No tests (auto formatted)
contentitemexportablefields:
  contentitemfields:
    fromServerVersion: ''
dependson:
  must:
  - core-api-post
  - core-api-download
tags: []
scripttarget: 0
runas: DBotWeakRole
runonce: false