managing incident from dynamic emails using MSGRAPH integration

MF762 — Tue, 01 Oct 2024 10:22:16 GMT

Hello everyone,

I am looking for a solution to handle a specific situation related to incident activation from an email, using the MSGRAPH integration.

Typically, to activate an incident, I classify it based on a static email subject. Then, I configure the "type" to trigger the corresponding playbook. However, this approach seems limited by the fact that the email subject must always be static.

I am now dealing with a scenario where the email subject cannot always be static but contains only some dynamic parts of text. I would like to understand if there is a way to correctly trigger the playbook in these cases, using only parts of the subject for classification.

Is it possible to implement this kind of management in email classification? If anyone has faced a similar situation or has ideas on how to proceed, I would appreciate any suggestions.

Thanks in advance for your help!

Re: managing incident from dynamic emails using MSGRAPH integration

jmazzeo — Thu, 03 Oct 2024 15:51:33 GMT

Hi @MF762, I think this a XSOAR question, is that right?

topic managing incident from dynamic emails using MSGRAPH integration in Cortex XDR Discussions

managing incident from dynamic emails using MSGRAPH integration

Re: managing incident from dynamic emails using MSGRAPH integration