Check Point Harmony Email and Collaboration (HEC)

Details
Content
Dependencies
Version History

The Best Way to Protect Enterprise Email & Collaboration from phishing, malware, account takeover, data loss, etc.

Check Point Harmony Email & Collaboration

Harmony Email & Collaboration (HEC) provides complete
protection for Microsoft 365, Google Workspace and all your
collaboration and file-sharing apps. HEC is designed specifically
for cloud email environments and is the ONLY solution that
prevents, not just detects or responds to, threats from entering the inbox.

What does this pack do?

This pack and its resources implement the integration with
Check Point SMART API allowing:

Collect security events for your secured SaaS periodically.
Retrieve the entity info to attach evidence to your incidents.
Request actions over a specific entity.

Pack Contributors:

Christian Gutierrez
Arvid Bushati

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Check Point Harmony Email & Collaboration

What does this pack do?

This pack and its resources implement the integration with
Check Point SMART API allowing:

Collect security events for your secured SaaS periodically.
Retrieve the entity info to attach evidence to your incidents.
Request actions over a specific entity.

Pack Contributors:

Christian Gutierrez
Arvid Bushati

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Automations

Name	Description
SendCPAction	Send quarantine or restore action and update action task id.
RunCPPhishingCampaign	Search other emails by sender and/or subject and quarantine.
ShowCPScanInfo	Get scan info from Check Point Smart API.
ShowCPEmailInfo	Get email info from Check Point Smart API.

Classifiers

Name	Description
CheckPointHEC Classifier	CheckPointHEC Classifier to CheckPointHEC Security Event Type
CheckPointHEC Incoming Mapper	CheckPointHEC Incoming Mapper

Incident Fields

Name	Description
CheckPointHEC Parent	Internal parent entity ID of email with leak
CheckPointHEC Type	Detection type (dlp, phishing, malware, spam)
CheckPointHEC Email Info	Email Information
CheckPointHEC Campaign Task	Campaign task id to get results
CheckPointHEC Request Time	Restore request time
CheckPointHEC Scan Info	Scan Information
CheckPointHEC Customer	Customer portal name
CheckPointHEC Email Sender	Sender of the email
CheckPointHEC Request Comment	Restore request comment
CheckPointHEC Email Task	Action task id to get results
CheckPointHEC Request Child	Restore request from multiple recipients email
CheckPointHEC Saas	Internal SaaS Identifier
CheckPointHEC Email Subject	Subject of the email
CheckPointHEC Entity	Internal entity ID of email with leak
CheckPointHEC Farm	Customer farm

Incident Types

Name	Description
CheckPointHEC Security Event
CheckPointHEC Restore Request

Integrations

Name	Description
Check Point Harmony Email and Collaboration (HEC) (Partner Contribution)	The Best Way to Protect Enterprise Email & Collaboration from phishing, malware, account takeover, data loss, etc.

Layouts

Name	Description
CP HEC Security Event Layout	Check Point HEC Incidents Layout

Playbooks

Name	Description
CheckPointHEC Get email for incident	Get email entity for a specific incident.

Automations

Name	Description
ShowCPScanInfo	Get scan info from Check Point Smart API.
ShowCPEmailInfo	Get email info from Check Point Smart API.
RunCPPhishingCampaign	Search other emails by sender and/or subject and quarantine.
SendCPAction	Send quarantine or restore action and update action task id.

Classifiers

Name	Description
CheckPointHEC Classifier	CheckPointHEC Classifier to CheckPointHEC Security Event Type
CheckPointHEC Incoming Mapper	CheckPointHEC Incoming Mapper

Incident Fields

Name	Description
CheckPointHEC Entity	Internal entity ID of email with leak
CheckPointHEC Campaign Task	Campaign task id to get results
CheckPointHEC Email Task	Action task id to get results
CheckPointHEC Request Comment	Restore request comment
CheckPointHEC Parent	Internal parent entity ID of email with leak
CheckPointHEC Saas	Internal SaaS Identifier
CheckPointHEC Email Info	Email Information
CheckPointHEC Email Sender	Sender of the email
CheckPointHEC Farm	Customer farm
CheckPointHEC Request Child	Restore request from multiple recipients email
CheckPointHEC Customer	Customer portal name
CheckPointHEC Scan Info	Scan Information
CheckPointHEC Email Subject	Subject of the email
CheckPointHEC Request Time	Restore request time
CheckPointHEC Type	Detection type (dlp, phishing, malware, spam)

Incident Types

Name	Description
CheckPointHEC Restore Request
CheckPointHEC Security Event

Integrations

Name	Description
Check Point Harmony Email and Collaboration (HEC) (Partner Contribution)	The Best Way to Protect Enterprise Email & Collaboration from phishing, malware, account takeover, data loss, etc.

Playbooks

Name	Description
CheckPointHEC Get email for alert	Get email entity for a specific alert.

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (1)

Pack Name	Pack By
Common Types	By: Cortex XSOAR

All level dependencies (3)

Pack Name	Pack By
Base	By: Cortex XSOAR
Aggregated Scripts	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

1.1.15 - 7903024 (March 25, 2026)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Added support for checkpointhec-download-large-email command that downloads large email files.
Updated the CloudInfra authentication endpoint to version 2.
Updated the Docker image to: demisto/python3:3.12.13.7444307.

Related pull requests:
- 43659
- 43451

Download

1.1.14 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43567

Download

1.1.13 - 7034172 (February 5, 2026)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Updated the CheckPointHEC integration to retrieve events 15 minutes in the past to avoid missing events not in results since they are not ready.
Fixed an issue in the parameter thread_types for the command get events.
Updated the url for the Cloud Infra API in the Middle East region.
Added support for the new Singapore region for both Smart API and Cloud Infra API.

Related pull requests:
- 42840
- 42939

Download

1.1.12 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

1.1.11 - R5469292 (October 20, 2025)

Scripts

SendCPAction

Updated the Docker image to: demisto/python3:3.12.8.3296088.

ShowCPEmailInfo

Updated the Docker image to: demisto/python3:3.12.8.3296088.

ShowCPScanInfo

Updated the Docker image to: demisto/python3:3.12.8.3296088.

RunCPPhishingCampaign

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 41158

Download

1.1.10 - R3980324 (June 26, 2025)

Classifiers

CheckPointHEC Classifier

Updated the CheckPointHEC Classifier classifier to map graymail type with the incident type CheckPointHEC Security Event.

Incident Fields

New: CheckPointHEC Request Comment
New: Added a new incident field- CheckPointHEC Request Comment that saves comment from end user on request
(Available from Cortex XSOAR 6.9.0).
New: CheckPointHEC Request Time
New: Added a new incident field- CheckPointHEC Request Time that saves request time from end user
(Available from Cortex XSOAR 6.9.0).
New: CheckPointHEC Request Child
New: Added a new incident field- CheckPointHEC Request Child that tells if the request comes from multiple recipients email
(Available from Cortex XSOAR 6.9.0).
CheckPointHEC Entity
Updated the CheckPointHEC Entity incident field to associate with the new incident type CheckPointHEC Restore Request.
New: CheckPointHEC Parent
New: Added a new incident field- CheckPointHEC Parent that saves the parent entity ID if the request comes from multiple recipients email
(Available from Cortex XSOAR 6.9.0).

Incident Types

New: CheckPointHEC Restore Request
New: Added a new incident type- CheckPointHEC Restore Request that handles email restore requests from end users
(Available from Cortex XSOAR 6.9.0).
CheckPointHEC Security Event
Updated the CheckPointHEC Security Event incident type to fix shown color.

Integrations

Check Point Harmony Email and Collaboration (HEC)

Updated the CheckPointHEC integration to skip master entities when a restore request comes from multiple recipients email.
Updated the Docker image to: demisto/python3:3.12.8.3296088.

Mappers

CheckPointHEC Incoming Mapper

Updated the CheckPointHEC Incoming Mapper mapper to map fields for the new incident type CheckPointHEC Restore Request.

Related pull requests:
- 39835
- 39649

Download

1.1.9 - 3079234 (April 7, 2025)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Fixed an issue where command checkpointhec-create-ap-exception was setting ignoring_spf_check as false when not provided.

Related pull requests:
- 39415
- 39458

Download

1.1.8 - 3042633 (April 2, 2025)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Metadata and documentation improvements.

Scripts

ShowCPEmailInfo

Metadata and documentation improvements.

ShowCPScanInfo

Metadata and documentation improvements.

SendCPAction

Metadata and documentation improvements.

RunCPPhishingCampaign

Metadata and documentation improvements.

Related pull requests:
- 39089

Download

1.1.7 - R2988287 (March 26, 2025)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Added support for checkpointhec-download-email command that download email.
Added support for include_clean argument in the checkpointhec-get-scan-info command to include clean results.
Added support for fetch-incidents command to get Graymail security events.
Updated the Docker image to: demisto/python3:3.12.8.1983910.

Scripts

RunCPPhishingCampaign

Updated the Docker image to: demisto/python3:3.12.8.1983910.

SendCPAction

Updated the Docker image to: demisto/python3:3.12.8.1983910.

ShowCPEmailInfo

Updated the Docker image to: demisto/python3:3.12.8.1983910.

ShowCPScanInfo

Updated the Docker image to: demisto/python3:3.12.8.1983910.

Related pull requests:
- 38935
- 38690

Download

1.1.6 - R2040490 (January 22, 2025)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Added support to include/exclude accepted/declined restore requests in the fetch incidents of restore request type.

Related pull requests:
- 37670
- 37278

Download

1.1.5 - 1748140 (December 4, 2024)

Scripts

ShowCPEmailInfo

Updated the Docker image to: demisto/python3:3.11.10.115186.

RunCPPhishingCampaign

Updated the Docker image to: demisto/python3:3.11.10.115186.

ShowCPScanInfo

Updated the Docker image to: demisto/python3:3.11.10.115186.

SendCPAction

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37528
- 37524
- 37525
- 37526
- 37527

Download

1.1.4 - R1681986 (November 21, 2024)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Added support to manage Anti-Phishing and Anti-Spam exceptions by adding the commands:
- checkpointhec-get-ap-exceptions
- checkpointhec-create-ap-exception
- checkpointhec-update-ap-exception
- checkpointhec-delete-ap-exception
Added support to manage Anti-Malware exceptions by adding the commands:
- checkpointhec-get-cp2-exception
- checkpointhec-create-cp2-exception
- checkpointhec-update-cp2-exception
- checkpointhec-delete-cp2-exception
- checkpointhec-get-cp2-exceptions
- checkpointhec-delete-cp2-exceptions
Added support to manage Anomaly exceptions by adding the commands:
- checkpointhec-get-anomaly-exceptions
- checkpointhec-create-anomaly-exception
- checkpointhec-delete-anomaly-exceptions
Added support to manage Click Time Protection exceptions by adding the commands:
- checkpointhec-get-ctp-lists
- checkpointhec-get-ctp-list
- checkpointhec-get-ctp-list-items
- checkpointhec-get-ctp-list-item
- checkpointhec-create-ctp-list-item
- checkpointhec-update-ctp-list-item
- checkpointhec-delete-ctp-list-item
- checkpointhec-delete-ctp-list-items
- checkpointhec-delete-ctp-lists
Added support to manage URL exceptions by adding the commands:
- checkpointhec-get-avurl-exception
- checkpointhec-create-avurl-exception
- checkpointhec-update-avurl-exception
- checkpointhec-delete-avurl-exception
- checkpointhec-get-avurl-exceptions
- checkpointhec-delete-avurl-exceptions
Added support to manage Smart DLP exceptions by adding the commands:
- checkpointhec-get-avdlp-exception
- checkpointhec-create-avdlp-exception
- checkpointhec-update-avdlp-exception
- checkpointhec-delete-avdlp-exception
- checkpointhec-get-avdlp-exceptions
- checkpointhec-delete-avdlp-exceptions
Added support to collect restore requests as incidents.
Added support to decline restore requests in the command checkpointhec-send-action.
Added support to report emails mis-classification in the command checkpointhec-report-mis-classification.
Updated the docker image to: demisto/python3:3.11.10.113941.

Related pull requests:
- 37054
- 36662

Download

1.1.3 - 1081587 (June 9, 2024)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Updated the option for url in the connect section configuration. Now more regions are supported.

Related pull requests:
- 34774
- 34782

Download

1.1.2 - 1040634 (May 23, 2024)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Updated the human-readable section in the following commands:
- checkpointhec_get_entity
- checkpointhec_get_events
Updated the Docker image to: demisto/python3:3.10.14.95137.

Scripts

SendCPAction

Fixed an issue where the script would not work properly when there are multiple instances running.
Updated the Docker image to: demisto/python3:3.10.14.95137.

ShowCPEmailInfo

Fixed an issue where the script would not work properly when there are multiple instances running.
Updated the Docker image to: demisto/python3:3.10.14.95137.

ShowCPScanInfo

Fixed an issue where the script would not work properly when there are multiple instances running.
Updated the Docker image to: demisto/python3:3.10.14.95137.

Related pull requests:
- 34460
- 34413

Download

1.1.1 - 987681 (May 1, 2024)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Fixed an issue on fetching incidents.

Related pull requests:
- 34115
- 34124

Download

1.1.0 - 970211 (April 21, 2024)

Classifiers

New: CheckPointHEC Classifier

New: Check Point HEC Classifier to CheckPointHEC Security Event Type (Available from Cortex XSOAR 6.9.0).

Incident Fields

CheckPointHEC Campaign Task
CheckPointHEC Customer
New: CheckPointHEC Email Info
CheckPointHEC Email Sender
CheckPointHEC Email Subject
New: CheckPointHEC Email Task
CheckPointHEC Entity
CheckPointHEC Farm
CheckPointHEC Saas
New: CheckPointHEC Scan Info
CheckPointHEC Type

Integrations

Check Point Harmony Email and Collaboration (HEC)

Added a new command checkpoint-get-events.
Improved implementation of filters for command checkpoint-search-emails.
Added support for authentication with Infinity Credentials.
Added support for Google Email application.
Updated the Docker image to: demisto/python3:3.10.14.91134.

Layouts

CP HEC Security Event Layout
Added an external link for email.

Mappers

New: CheckPointHEC Incoming Mapper

New: Check Point HEC Incoming Mapper to CheckPointHEC Security Event Type (Available from Cortex XSOAR 6.9.0).

Playbooks

CheckPointHEC Get email for incident

Updated the playbook based on incident field changes.

Scripts

SendCPAction

Updated the Docker image to: demisto/python3:3.10.14.91134.

RunCPPhishingCampaign

Updated the Docker image to: demisto/python3:3.10.14.91134.

ShowCPScanInfo

Updated the Docker image to: demisto/python3:3.10.14.91134.

ShowCPEmailInfo

Updated the Docker image to: demisto/python3:3.10.14.91134.

Related pull requests:
- 33755
- 34046

Download

1.0.6 - 767481 (January 17, 2024)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Updated the Docker image to: demisto/python3:3.10.13.84405.

Related pull requests:
- 32259

Download

1.1.15 - 7903024 (March 25, 2026)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Added support for checkpointhec-download-large-email command that downloads large email files.
Updated the CloudInfra authentication endpoint to version 2.
Updated the Docker image to: demisto/python3:3.12.13.7444307.

Related pull requests:
- 43659
- 43451

Download

1.1.14 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43567

Download

1.1.13 - 7034172 (February 5, 2026)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Updated the CheckPointHEC integration to retrieve events 15 minutes in the past to avoid missing events not in results since they are not ready.
Fixed an issue in the parameter thread_types for the command get events.
Updated the url for the Cloud Infra API in the Middle East region.
Added support for the new Singapore region for both Smart API and Cloud Infra API.

Related pull requests:
- 42840
- 42939

Download

1.1.12 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

1.1.11 - R5469292 (October 20, 2025)

Scripts

SendCPAction

Updated the Docker image to: demisto/python3:3.12.8.3296088.

ShowCPEmailInfo

Updated the Docker image to: demisto/python3:3.12.8.3296088.

ShowCPScanInfo

Updated the Docker image to: demisto/python3:3.12.8.3296088.

RunCPPhishingCampaign

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 41158

Download

1.1.10 - R3980324 (June 26, 2025)

Classifiers

CheckPointHEC Classifier

Updated the CheckPointHEC Classifier classifier to map graymail type with the incident type CheckPointHEC Security Event.

Incident Fields

New: CheckPointHEC Request Comment
New: Added a new incident field- CheckPointHEC Request Comment that saves comment from end user on request
New: CheckPointHEC Request Time
New: Added a new incident field- CheckPointHEC Request Time that saves request time from end user
New: CheckPointHEC Request Child
New: Added a new incident field- CheckPointHEC Request Child that tells if the request comes from multiple recipients email
CheckPointHEC Entity
Updated the CheckPointHEC Entity incident field to associate with the new incident type CheckPointHEC Restore Request.
New: CheckPointHEC Parent
New: Added a new incident field- CheckPointHEC Parent that saves the parent entity ID if the request comes from multiple recipients email

Incident Types

New: CheckPointHEC Restore Request
New: Added a new incident type- CheckPointHEC Restore Request that handles email restore requests from end users
CheckPointHEC Security Event
Updated the CheckPointHEC Security Event incident type to fix shown color.

Integrations

Check Point Harmony Email and Collaboration (HEC)

Updated the CheckPointHEC integration to skip master entities when a restore request comes from multiple recipients email.
Updated the Docker image to: demisto/python3:3.12.8.3296088.

Mappers

CheckPointHEC Incoming Mapper

Updated the CheckPointHEC Incoming Mapper mapper to map fields for the new incident type CheckPointHEC Restore Request.

Related pull requests:
- 39835
- 39649

Download

1.1.9 - 3079234 (April 7, 2025)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Fixed an issue where command checkpointhec-create-ap-exception was setting ignoring_spf_check as false when not provided.

Related pull requests:
- 39415
- 39458

Download

1.1.8 - 3042633 (April 2, 2025)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Metadata and documentation improvements.

Scripts

ShowCPEmailInfo

Metadata and documentation improvements.

ShowCPScanInfo

Metadata and documentation improvements.

SendCPAction

Metadata and documentation improvements.

RunCPPhishingCampaign

Metadata and documentation improvements.

Related pull requests:
- 39089

Download

1.1.7 - R2988287 (March 26, 2025)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Added support for checkpointhec-download-email command that download email.
Added support for include_clean argument in the checkpointhec-get-scan-info command to include clean results.
Added support for fetch-incidents command to get Graymail security events.
Updated the Docker image to: demisto/python3:3.12.8.1983910.

Scripts

RunCPPhishingCampaign

Updated the Docker image to: demisto/python3:3.12.8.1983910.

SendCPAction

Updated the Docker image to: demisto/python3:3.12.8.1983910.

ShowCPEmailInfo

Updated the Docker image to: demisto/python3:3.12.8.1983910.

ShowCPScanInfo

Updated the Docker image to: demisto/python3:3.12.8.1983910.

Related pull requests:
- 38935
- 38690

Download

1.1.6 - R2040490 (January 22, 2025)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Added support to include/exclude accepted/declined restore requests in the fetch incidents of restore request type.

Related pull requests:
- 37670
- 37278

Download

1.1.5 - 1748140 (December 4, 2024)

Scripts

ShowCPEmailInfo

Updated the Docker image to: demisto/python3:3.11.10.115186.

RunCPPhishingCampaign

Updated the Docker image to: demisto/python3:3.11.10.115186.

ShowCPScanInfo

Updated the Docker image to: demisto/python3:3.11.10.115186.

SendCPAction

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37528
- 37524
- 37525
- 37526
- 37527

Download

1.1.4 - R1681986 (November 21, 2024)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Added support to manage Anti-Phishing and Anti-Spam exceptions by adding the commands:
- checkpointhec-get-ap-exceptions
- checkpointhec-create-ap-exception
- checkpointhec-update-ap-exception
- checkpointhec-delete-ap-exception
Added support to manage Anti-Malware exceptions by adding the commands:
- checkpointhec-get-cp2-exception
- checkpointhec-create-cp2-exception
- checkpointhec-update-cp2-exception
- checkpointhec-delete-cp2-exception
- checkpointhec-get-cp2-exceptions
- checkpointhec-delete-cp2-exceptions
Added support to manage Anomaly exceptions by adding the commands:
- checkpointhec-get-anomaly-exceptions
- checkpointhec-create-anomaly-exception
- checkpointhec-delete-anomaly-exceptions
Added support to manage Click Time Protection exceptions by adding the commands:
- checkpointhec-get-ctp-lists
- checkpointhec-get-ctp-list
- checkpointhec-get-ctp-list-items
- checkpointhec-get-ctp-list-item
- checkpointhec-create-ctp-list-item
- checkpointhec-update-ctp-list-item
- checkpointhec-delete-ctp-list-item
- checkpointhec-delete-ctp-list-items
- checkpointhec-delete-ctp-lists
Added support to manage URL exceptions by adding the commands:
- checkpointhec-get-avurl-exception
- checkpointhec-create-avurl-exception
- checkpointhec-update-avurl-exception
- checkpointhec-delete-avurl-exception
- checkpointhec-get-avurl-exceptions
- checkpointhec-delete-avurl-exceptions
Added support to manage Smart DLP exceptions by adding the commands:
- checkpointhec-get-avdlp-exception
- checkpointhec-create-avdlp-exception
- checkpointhec-update-avdlp-exception
- checkpointhec-delete-avdlp-exception
- checkpointhec-get-avdlp-exceptions
- checkpointhec-delete-avdlp-exceptions
Added support to collect restore requests as incidents.
Added support to decline restore requests in the command checkpointhec-send-action.
Added support to report emails mis-classification in the command checkpointhec-report-mis-classification.
Updated the docker image to: demisto/python3:3.11.10.113941.

Related pull requests:
- 37054
- 36662

Download

1.1.3 - 1081587 (June 9, 2024)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Updated the option for url in the connect section configuration. Now more regions are supported.

Related pull requests:
- 34774
- 34782

Download

1.1.2 - 1040634 (May 23, 2024)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Updated the human-readable section in the following commands:
- checkpointhec_get_entity
- checkpointhec_get_events
Updated the Docker image to: demisto/python3:3.10.14.95137.

Scripts

SendCPAction

Fixed an issue where the script would not work properly when there are multiple instances running.
Updated the Docker image to: demisto/python3:3.10.14.95137.

ShowCPEmailInfo

Fixed an issue where the script would not work properly when there are multiple instances running.
Updated the Docker image to: demisto/python3:3.10.14.95137.

ShowCPScanInfo

Fixed an issue where the script would not work properly when there are multiple instances running.
Updated the Docker image to: demisto/python3:3.10.14.95137.

Related pull requests:
- 34460
- 34413

Download

1.1.1 - 987681 (May 1, 2024)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Fixed an issue on fetching incidents.

Related pull requests:
- 34115
- 34124

Download

1.1.0 - 970211 (April 21, 2024)

Classifiers

New: CheckPointHEC Classifier

New: Check Point HEC Classifier to CheckPointHEC Security Event Type #### Incident Fields
CheckPointHEC Campaign Task
CheckPointHEC Customer
New: CheckPointHEC Email Info
CheckPointHEC Email Sender
CheckPointHEC Email Subject
New: CheckPointHEC Email Task
CheckPointHEC Entity
CheckPointHEC Farm
CheckPointHEC Saas
New: CheckPointHEC Scan Info
CheckPointHEC Type

Integrations

Check Point Harmony Email and Collaboration (HEC)

Added a new command checkpoint-get-events.
Improved implementation of filters for command checkpoint-search-emails.
Added support for authentication with Infinity Credentials.
Added support for Google Email application.
Updated the Docker image to: demisto/python3:3.10.14.91134.

Mappers

New: CheckPointHEC Incoming Mapper

New: Check Point HEC Incoming Mapper to CheckPointHEC Security Event Type #### Scripts

Playbooks

CheckPointHEC Get email for incident

Updated the playbook based on incident field changes.

Related pull requests:
- 33755
- 34046

Download

1.0.6 - 767481 (January 17, 2024)

Integrations

Check Point Harmony Email and Collaboration (HEC)

Updated the Docker image to: demisto/python3:3.10.13.84405.

Related pull requests:
- 32259

Download

PUBLISHER

Check Point Harmony Email & Collaboration (HEC)

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Partner
Created	July 13, 2023
Last Release	March 25, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

Check Point Harmony Email and Collaboration (HEC)

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.