topic Re: Cortex XDR email data integration in Cortex XDR Discussions

Cortex XDR email data integration

A.Babu458463 — Thu, 07 Aug 2025 08:14:49 GMT

Hi,

i have integrated email data from Microsoft Graph API to Cortex Collections Integration -> M365, but still there are no phishing emails or suspicious emails being reported as incidents in Cortex. Could you let me know what should be done inorder to trigger such alerts and incidents in Cortex?

Re: Cortex XDR email data integration

eluis — Fri, 08 Aug 2025 15:33:09 GMT

Hi A.Babu458463,

By design, the email integration that you have done, will not give you the emails reported as phishing

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

KR,

Luis

Re: Cortex XDR email data integration

A.Babu458463 — Mon, 11 Aug 2025 07:32:23 GMT

Hi,

could you let me know then how to do it? I need these emails to be reported as phishing in Cortex and also if an account is compromised.

Re: Cortex XDR email data integration

eluis — Wed, 13 Aug 2025 12:07:43 GMT

Hi A.Babu458463,

In Cortex XDR you cant implement this phishing processes because XDR is not a phishing tool

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

KR,

Luis