Mimecast unified email management offers cloud email services for email security, continuity and archiving emails.
The Mimecast platform offers protection against email threats and data leaks while preventing service downtime through email archiving and uptime services.
Use the Mimecast v2 integration in the content pack to automate protection and remediation actions against email threats and fetch Impersonation, Attachments, URL, and Held Messages incidents from Mimecast.
Note: All incident timestamps are in the Coordinated Universal Time (UTC) timezone.
The Mimecast platform offers protection against email threats and data leaks while preventing service downtime through email archiving and uptime services.
Use the Mimecast Event Collector v2 in the content pack to fetch Audit and SIEM events from Mimecast.
Note: All event timestamps are in the Coordinated Universal Time (UTC) timezone.
| Name | Description |
|---|---|
| MimecastFindEmail | Find an email across all mailboxes, and return the list of mailboxes where the email was found, as well as Yes if the mail was found anywhere or No otherwise. |
| MimecastQuery | Deprecated. Use mimecast-query command instead. |
| Name | Description |
|---|---|
| Mimecast v2 | Mimecast unified email management offers cloud email services for email security, continuity and archiving emails. Please read detailed instructions in order to understand how to set the integration's parameters. |
| Name | Description |
|---|---|
| Mimecast - Block Sender Email | A playbook to block sender email address using Mimecast integration. |
| Mimecast - Block Sender Domain | A playbook to block sender domain name using Mimecast integration. |
| Get Email From Email Gateway - Mimecast | This playbook retrieves a specified EML/MSG file directly from Mimecast. |
| Name | Description |
|---|---|
| MimecastFindEmail | Find an email across all mailboxes, and return the list of mailboxes where the email was found, as well as Yes if the mail was found anywhere or No otherwise. |
| MimecastQuery | Deprecated. Use mimecast-query command instead. |
| Name | Description |
|---|---|
| Mimecast Event Collector v2 | Use the Mimecast Event Collector v2 integration to fetch Audit events and SIEM logs for various SIEM event types, using API 2.0 with OAuth2 authentication. |
| Mimecast v2 | Mimecast unified email management offers cloud email services for email security, continuity and archiving emails. Please read detailed instructions in order to understand how to set the integration's parameters. |
| Mimecast Event Collector (Deprecated) | Deprecated. Use Mimecast Event Collector v2 instead. |
| Name | Description |
|---|---|
Mimecast Modeling Rule |
| Name | Description |
|---|---|
Mimecast Parsing Rule |
| Name | Description |
|---|---|
| Mimecast - Block Sender Email | A playbook to block sender email address using Mimecast integration. |
| Mimecast - Block Sender Domain | A playbook to block sender domain name using Mimecast integration. |
| Get Email From Email Gateway - Mimecast | This playbook retrieves a specified EML/MSG file directly from Mimecast. |
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
| Pack Name | Pack By |
|---|
| Pack Name | Pack By |
|---|---|
| Aggregated Scripts | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
| Cortex REST API | By: Cortex XSOAR |
field_name parameter to use correct API field names (reasonCode instead of reason_code, added senderIP option). Backward compatibility maintained for existing playbooks.field_name parameter to use correct API field names (reasonCode instead of reason_code, added senderIP option). Backward compatibility maintained for existing playbooks.
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | July 19, 2020 | |
| Last Release | January 18, 2026 |
