managing incident from dynamic emails using MSGRAPH integration

[MF762]

Hello everyone,

I am looking for a solution to handle a specific situation related to incident activation from an email, using the MSGRAPH integration.

Typically, to activate an incident, I classify it based on a static email subject. Then, I configure the "type" to trigger the corresponding playbook. However, this approach seems limited by the fact that the email subject must always be static.

I am now dealing with a scenario where the email subject cannot always be static but contains only some dynamic parts of text. I would like to understand if there is a way to correctly trigger the playbook in these cases, using only parts of the subject for classification.

Is it possible to implement this kind of management in email classification? If anyone has faced a similar situation or has ideas on how to proceed, I would appreciate any suggestions.

Thanks in advance for your help!

[jmazzeo]

Hi @MF762, I think this a XSOAR question, is that right?