To send an email and log its response in Google SecOps SOAR, follow these
steps:
Use the Send Mail action to send an email.
Add the Wait For Mail From User action to periodically
query the mailbox for a response. This action identifies the correspondence
by using a unique ID.
Once the response is received, it will be fetched into the platform.
The response can be seen on the case wall and used as an input for other actions
in the playbook.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-06 UTC."],[[["Google Security Operations SOAR allows sending emails and logging responses."],["The \"Send Mail\" action initiates the email sending process within the SOAR platform."],["The \"Wait For Mail From User\" action periodically checks for email responses, identifying them by a unique ID."],["Email responses are fetched into the SOAR platform and can be viewed on the case wall for use in further playbook actions."],["Email capabilities require either the MS Graph Mail or Gmail integration to be installed from the Marketplace."]]],[]]
