Playbook: G Suite for GMail Message Identifier Activity Analysis

Description

Accepts an internet message id, and asks Gmail for a list of mailboxes to search, and then searches each one to look for records that have a matching internet message id. It then produces a normalized output and summary table.

Apps:

Associated Detections

How To Implement

This input playbook requires the G Suite for GMail connector to be configured. It is designed to work in environments that posess a maximum of 500 mailboxes at this time, due to a limitation in the G Suite for GMail connector.

Explore Playbook

Required fields

Reference

source | version: 1