Create Security Operations email properties

You can specify email addresses for reports and control automatic email behaviors using email Properties.

Before you begin

Role required: sn_sec_cmn.admin

Set up external detection tools to send emails to your email parsing inbox.

Procedure

  1. Navigate to All > Security Operations > Email Processing > Properties.
  2. Enter your recipient mailboxes as appropriate:
    These are inbound email addresses to be processed by Email Parsing, rather than Inbound Actions.
    Table 1. Email parsing properties
    FieldDescription
    Inbox for Security Operations tools Full email address for Security Operations. For example, secops_support@yourcompany.com.
    Inbox for Security Incident tools Full email address for Security Incident Response. For example, sir_support@your.company.com.
    Inbox for Vulnerability Response tools Full email address for Vulnerability Response. For example, vuln_resp@yourcompany.com.
    Inbox for Threat Intelligence tools Full email address for Threat Intelligence. For example, threat_intel@yourcompany.com.
  3. Click Save.