Reporting

What is the best way to ingest links from the body of emails O365 Exchange or Mimecast?

benwebsternucle
Engager

I am currently ingesting O365 Exchange and Mimecast logs in to Splunk, but I would like to start ingesting any links that are contained in the body of emails to allow additional security checks. Has anyone come across a good way to achieve this?

Thanks

Labels (1)
0 Karma
1 Solution

nickhills
Ultra Champion

I have done this in the past with MimeCast - I don't think the MimeCast TA supported this, so I wrote a script to pull the message content in from the API.

https://www.mimecast.com/tech-connect/documentation/endpoint-reference/archive/get-message-detail/

If my comment helps, please give it a thumbs up!

View solution in original post

0 Karma

nickhills
Ultra Champion

I have done this in the past with MimeCast - I don't think the MimeCast TA supported this, so I wrote a script to pull the message content in from the API.

https://www.mimecast.com/tech-connect/documentation/endpoint-reference/archive/get-message-detail/

If my comment helps, please give it a thumbs up!

View solution in original post

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!