
Aug 23, 2024
1.0.0
ThreatQ versions >= 5.29.0
ThreatQ CDF for Microsoft Exchange
Overview
The Microsoft Exchange CDF for ThreatQ is an integration that enables the ingestion of emails and attachments from an Exchange Mailbox, into ThreatQ.
The integration provides the following feed:
- Microsoft Exchange Intel Mailbox - ingests emails from Microsoft Exchange/Outlook mailbox as ThreatQ Email.
The integration ingests the following system objects:
- Events
- Files (attachments)
- Indicators