Classifies Gmail phishing email messages.
Gmail
- Details
- Content
- Dependencies
- Version History
Gmail API and user management (This integration replaces the Gmail functionality in the GoogleApps API and G Suite integration).
Classifiers
| Name | Description |
|---|---|
Gmail - Classifier | |
Gmail - Incoming Mapper | Maps incoming Gmail phishing email message fields. |
Playbooks
| Name | Description |
|---|---|
| Search And Delete Emails - Gmail | This playbook searches Gmail to identify and delete emails with similar attributes to the malicious email. |
| Get Original Email - Gmail v2 | This v2 playbook uses the reporter's email headers to retrieve the original email. This decreases the number of tasks to retrieve the original email. |
Integrations
| Name | Description |
|---|---|
| Gmail | Gmail API and user management (This integration replaces the Gmail functionality in the GoogleApps API and G Suite integration). |
Classifiers
| Name | Description |
|---|---|
Gmail - Classifier | Classifies Gmail phishing email messages. |
Gmail - Incoming Mapper | Maps incoming Gmail phishing email message fields. |
Playbooks
| Name | Description |
|---|---|
| Search And Delete Emails - Gmail | This playbook searches Gmail to identify and delete emails with similar attributes to the malicious email. |
| Get Original Email - Gmail v2 | This v2 playbook uses the reporter's email headers to retrieve the original email. This decreases the number of tasks to retrieve the original email. |
Integrations
| Name | Description |
|---|---|
| Gmail | Gmail API and user management (This integration replaces the Gmail functionality in the GoogleApps API and G Suite integration). |
Required Content Packs (4)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| CommonScripts | By: Cortex XSOAR |
| CoreAlertFields | By: Cortex XSOAR |
| DemistoRESTAPI | By: Cortex XSOAR |
Optional Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Phishing | By: Cortex XSOAR |
1.2.4 - 4112675 (November 28, 2022)
- 22229
Download
Integrations
Gmail
- Added the Maximum number of emails to pull per fetch configuration parameter.
- Improved fetch incidents logic to avoid duplicate incidents.
- Improved handling of emails with an invalid Date header.
- Updated the Docker image to: demisto/google-api-py3:1.0.0.38189.
- 22229
Download
1.2.2 - 4049710 (November 17, 2022)
- 22034
Download
Integrations
Gmail
- Added support for multiple email addresses in forwarding_email argument in the gmail-forwarding-address-add command.
- Added 4 commands:
- gmail-forwarding-address-get
- gmail-forwarding-address-list
- gmail-forwarding-address-remove
- gmail-forwarding-address-update
- 22034
Download
1.2.0 - R3994332 (November 8, 2022)
1.1.16 - 2745974 (April 12, 2022)
Integrations
Gmail
- Added new command gmail-list-labels
1.1.15 - 2596822 (March 17, 2022)
Integrations
Gmail
- Updated the Docker image to: demisto/google-api:1.0.0.27615.
1.1.14 - 2293537 (January 23, 2022)
Integrations
Gmail
- General documentation improvements.
1.1.13 - 2244042 (January 12, 2022)
Integrations
Gmail
- Improved the templateParams argument description in the send-mail command.
1.1.12 - 2183875 (December 30, 2021)
Playbooks
Search And Delete Emails - Gmail
- Changed the condition in the Were similar emails found? task to include only emails which correspond to the search parameters.
- Added tasks to extract and parse the recipients of the found emails.
- Added extra data regarding found emails to the manual task.
- Wrapped the email subject with parentheses to enable searching the exact subject in the Search Gmail for similar emails last 7 days task.
1.1.11 - R2146019 (December 21, 2021)
Playbooks
Get Original Email - Gmail v2
- Updated the playbook 'fromversion' from 6.1.0 to 6.0.0
New: Search And Delete Emails - Gmail
- This playbook searches Gmail to identify and delete emails with similar attributes to the malicious email. (Available from Cortex XSOAR 6.0.0).
1.1.10 - 1913264 (November 8, 2021)
Mappers
Gmail - Incoming Mapper
- Adding the "Phishing Reporter Email Headers" field.
- BREAKING FIX Disassociate the "Email Headers" field as it represents the original email headers and not the reporter headers.
Playbooks
New: Get Original Email - Gmail v2
- This v2 playbook uses the reporter email headers to retrieve the original email. This decreases the amount of the tasks needed to retrieve the original email.
Use this playbook to retrieve the original email using Gmail integration, including headers and attachments.
You must have the necessary permissions in your Gmail service to execute global search: Google Apps Domain-Wide Delegation of Authority.
1.1.9 - 7933644 (October 4, 2021)
Integrations
Gmail
- Documentation and metadata improvements.
1.1.8 - 7844526 (September 29, 2021)
Integrations
Gmail
- Updated the Docker image to: demisto/google-api:1.0.0.24033.
1.1.7 - 7296983 (August 26, 2021)
Mappers
Gmail - Incoming Mapper
- Adding "Email Headers" field mapping.
1.1.6 - 327772 (April 13, 2021)
Integrations
Gmail
- Fixed an issue where the gmail-search-all-mailboxes command failed to run when disabled mailboxes existed
- Updated the Docker image to: demisto/google-api:1.0.0.18525
1.1.5 - R303568 (March 14, 2021)
Integrations
Gmail
- Improved the description of the credentials parameter.
- Updated the Docker image to demisto/google-api:1.0.0.16046.
1.1.4 - 266021 (January 28, 2021)
Integrations
Gmail
- Maintenance and stability enhancements.
- Updated the Docker image to: demisto/google-api:1.0.0.15653.
1.1.3 - R264879 (January 27, 2021)
Integrations
Gmail
- Fixed an issue where the integration attempted to send requests via proxy even though the Use system proxy settings integration parameter was not checked.
- Updated docker image to the latest version.
1.1.2 - 192645 (November 18, 2020)
Integrations
Gmail
- Added the reply-mail command which sends an email reply to a given message using Gmail.
- Fixed the following issues in the send-mail command:
- The additionalHeader argument was added to the request only if attachments were received.
- Attachments were not attached correctly when both the htmlBody and body arguments were received.
- Updated the Docker image to: demisto/google-api:1.0.0.13775.
1.1.1 - R180529 (November 9, 2020)
Integrations
Gmail
Fixed an issue where the test-module didn't run properly with fetch incidents.
1.1.0 - 177948 (November 8, 2020)
Integrations
Gmail
- Added the gmail-send-as-add and gmail-forwarding-address-add commands.
- Added new arguments support in the gmail-set-autoreply command.
- Updated the Docker image to: demisto/google-api:1.0.0.12690.
1.0.7 - R171637 (November 3, 2020)
Integrations
Gmail
- Fixed an issue where scheduled reports were not sent as attachments.
- Upgraded the Docker image to demisto/google-api:1.0.0.11841.
1.0.6 - 126788 (September 26, 2020)
Integrations
Gmail
- Fixed an issue where the from argument did not work as expcted in the send-mail command.
- Upgraded the Docker image to demisto/google-api:1.0.0.11655.
1.0.5 - R124496 (September 23, 2020)
Integrations
Gmail
Breaking Change: Removed the deprecated event argument from the gmail-list-users command.
1.0.4 - 88984 (August 16, 2020)
Integrations
Gmail
- Fixed an issue where the send-email command sends emails with both the textual body and HTML body.
1.0.3 - 84800 (August 10, 2020)
Integrations
Gmail
- Fixed an issue regarding the MIMEText mail sender. HTML emails were sent as attachments causing them not to display correctly.
1.0.2 - R72890 (July 23, 2020)
PUBLISHER
Cortex
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | July 23, 2020 | |
| Last Release | December 1, 2022 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
