topic Re: Reminder Follow-Up Mail Playbook in Cortex XSOAR Discussions

Reminder Follow-Up Mail Playbook

NivNet — Tue, 04 Feb 2025 13:28:40 GMT

I need to create a simple JOB in Demisto that does the following:

Sends an email to the user - with the text "Reminder to perform action XXX"
Give the user half an hour to reply by email (the user can reply with any text they want),
Wait half an hour
If they replied something, close the event
If they didn't reply within half an hour,
Send another email - "Reminder 2 to perform action XXX" and then close the event

I saw that there is a Task called EmailAskUser but I can't close the task after half an hour if they haven't replied

I would appreciate the help of the experts here 😝

Re: Reminder Follow-Up Mail Playbook

ctopay — Thu, 06 Feb 2025 10:49:47 GMT

You can start your flow in parallel, start the email-based data collection, and if you get a reply, close it(from the beginning or in the next tree). Attaching a sample playbook.

Re: Reminder Follow-Up Mail Playbook

NivNet — Sun, 09 Feb 2025 14:38:25 GMT

Nice Solution, but its not exactly what i meant,

I want it to by simplified by not using link to form, only user's reply

Re: Reminder Follow-Up Mail Playbook

ctopay — Mon, 10 Feb 2025 09:58:41 GMT

I think you'd need a flow similar to the below pack to cover the email thread since it'll be an email in your case but not a direct post to the same incident anymore. https://xsoar.pan.dev/docs/reference/packs/email-communication

In the same way as the preprocessing-based example, you can link incoming messages and then run the second email operation with a playbook like the attached(or you can do it directly in the script).