Stay organized with collections
Save and categorize content based on your preferences.
Change log for MIMECAST_MAIL
Date
Changes
2025-02-06
Enhancement:
- Changed mapping of "filename_for_malachite" from "target.process.file.full_path" to "principal.resource.name".
- Changed mapping of "fileName" from "principal.process.file.full_path" to "target.process.file.full_path".
2025-01-23
Enhancement:
- Mapped "md5" to "target.file.md5".
- Changed mapping of "filename_for_malachite" from "principal.resource.name" to "target.process.file.full_path".
- Mapped "urlCategory" to "principal.url_metadata.categories".
- Mapped "credentialTheft" to "security_result.detection_fields".
- Mapped "reason" to "security_result.summary".
2024-11-13
Enhancement:
- Mapped "URL" to "principal.url".
2024-08-05
Enhancement:
- Mapped "sourceIp" to "principal.ip" and "principal.asset.ip".
- Mapped "url" to "principal.url".
- Mapped "msgid" to "network.email.mail_id".
- Mapped "subject" to "network.email.subject".
- Mapped "senderDomain", "AttNames", and "AttCnt" to "security_result.detection_fields".
2023-03-31
Enhancement:
- Mapped "filename_for_malachite" to "principal.resource.name".
- Mapped "fileName" to "principal.process.file.full_path".
- Mapped "sha256" to "target.file.sha256".
- Mapped "sha1" to "target.file.sha1".
- Added conditional check for "aCode".
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-06 UTC."],[[["The change log documents enhancements to the MIMECAST_MAIL integration, detailing mapping adjustments and additions."],["Updates include mapping various fields such as \"filename_for_malachite,\" \"fileName,\" \"md5,\" \"urlCategory,\" \"credentialTheft,\" and \"reason\" to different data points."],["Several fields like \"URL,\" \"sourceIp,\" \"url,\" \"msgid,\" \"subject,\" \"senderDomain,\" \"AttNames,\" and \"AttCnt\" have been mapped to relevant categories and fields within the system."],["Multiple mappings of \"filename_for_malachite\" have been changed and adjusted over the course of several updates."],["File hash values such as \"sha256\" and \"sha1\" were mapped to the \"target.file\" category, while a conditional check for \"aCode\" was added to the integrations."]]],[]]
