Note: The supported time format is yyyy-MM-ddThh:mm:ss+|-nnnn (2021-12-08T10:00:00-0400). The relevant fields are "datetime" or "eventTime"
Mimecast
- Details
- Content
- Dependencies
- Version History
Mimecast unified email management offers cloud email services for email security, continuity and archiving emails. Read the detailed instructions to understand how to configure the integration's parameters.
Note: The supported time format is yyyy-MM-ddThh:mm:ss+|-nnnn (2021-12-08T10:00:00-0400). The relevant fields are "datetime" or "eventTime"
Automations
| Name | Description |
|---|---|
| MimecastFindEmail | Find an email across all mailboxes, and return the list of mailboxes where the email was found, as well as Yes if the mail was found anywhere or No otherwise. |
| MimecastQuery | Deprecated. Use mimecsat-query command instead. |
Integrations
| Name | Description |
|---|---|
| Mimecast v2 | Mimecast unified email management offers cloud email services for email security, continuity and archiving emails. Please read detailed instructions in order to understand how to set the integration's parameters. |
Playbooks
| Name | Description |
|---|---|
| Mimecast - Block Sender Domain | A playbook to block sender domain name using Mimecast integration. |
| Mimecast - Block Sender Email | A playbook to block sender email address using Mimecast integration. |
| Get Email From Email Gateway - Mimecast | This playbook retrieves a specified EML/MSG file directly from Mimecast. |
Automations
| Name | Description |
|---|---|
| MimecastQuery | Deprecated. Use mimecsat-query command instead. |
| MimecastFindEmail | Find an email across all mailboxes, and return the list of mailboxes where the email was found, as well as Yes if the mail was found anywhere or No otherwise. |
Integrations
| Name | Description |
|---|---|
| Mimecast Event Collector | |
| Mimecast v2 | Mimecast unified email management offers cloud email services for email security, continuity and archiving emails. Please read detailed instructions in order to understand how to set the integration's parameters. |
Modeling Rules
| Name | Description |
|---|---|
Mimecast Modeling Rule |
Parsing Rules
| Name | Description |
|---|---|
Mimecast Parsing Rule |
Playbooks
| Name | Description |
|---|---|
| Get Email From Email Gateway - Mimecast | This playbook retrieves a specified EML/MSG file directly from Mimecast. |
| Mimecast - Block Sender Email | A playbook to block sender email address using Mimecast integration. |
| Mimecast - Block Sender Domain | A playbook to block sender domain name using Mimecast integration. |
Required Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (3)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
| Cortex REST API | By: Cortex XSOAR |
2.5.8 - R3444919 (May 18, 2025)
- 39133
Download
Integrations
Mimecast v2
- Fixed an issue where the fetch-incidents command only fetched 100 incidents in a fetch cycle. Set the Incidents Fetch Interval to a maximum of 15 minutes if the number of incidents is expected to exceed the specified max fetch limit in each fetch cycle.
- Added the Max fetch limit parameter. Default value is 100, maximum value is 200. This parameter allows to manually configure the maximum fetch limit for each incident type.
- Breaking changes: Make sure to set the Incidents Fetch Interval to a maximum of 15 minutes if the number of incidents is expected to exceed the specified max fetch limit in each fetch cycle.
- Documentation and metadata improvements.
- Updated the Docker image to: demisto/python3:3.12.8.1983910.
Scripts
MimecastFindEmail
- Documentation and metadata improvements.
- 39133
Download
2.5.5 - R2040490 (January 22, 2025)
- 37786
- 37174
Download
Integrations
Mimecast v2
- Updated the mimecast-get-group-members command to support the all_results argument, enabling the retrieval of all results.
- Updated the mimecast-get-group-members command to respect the limit argument. If the limit argument exceeds the API's default limit, the command will retrieve data up to the specified limit using pagination, instead of defaulting to the API's limit.
- Updated the Docker image to: demisto/python3:3.11.10.116949.
- 37786
- 37174
Download
2.5.2 - 1605511 (November 7, 2024)
- 37050
Download
Integrations
Mimecast v2
- Fixed an issue where the mimecast-query command did not function correctly when both the sentTo and sentFrom arguments were provided simultaneously.
- Fixed an issue where the mimecast-query command failed when using the subject argument due to an incorrect search query.
- 37050
Download
2.5.1 - 1512684 (October 15, 2024)
- 36672
- 36641
Download
Integrations
Mimecast v2
- Added the configuration parameter Incidents Fetch Interval.
- Added the argument notes to the mimecast-add-group-member command.
- Added the context output Mimecast.Group.Users.Notes to the mimecast-get-group-members command.
- Updated the Docker image to: demisto/python3:3.11.10.111526.
- 36672
- 36641
Download
2.3.0 - 1098002 (June 17, 2024)
- 34386
Download
Integrations
Mimecast v2
Added support for API 2.0 with client id and secret id parameters.
Deprecated the command mimecast-update-policy. Use mimecast-update-block-sender-policy instead.
Deprecated the command mimecast-create-policy. Use mimecast-create-block-sender-policy instead.
Deprecated the command mimecast-list-blocked-sender-policies. Use mimecast-list-policies instead.
Added support for additional types of policies in the mimecast-get-policy command .
Added support for additional types of policies in the mimecast-delete-policy command .
Updated the integration to add the following commands:
- mimecast-get-archive-search-logs: Retrieves archive search logs.
- mimecast-get-search-logs: Retrieves the search logs.
- mimecast-get-view-logs: Retrieves the email view logs.
- mimecast-list-account: Retrieves the summary information for a Mimecast account.
- mimecast-list-policies: Retrieves a list of policies of a specified type.
- mimecast-create-block-sender-policy: Creates a block-sender policy.
- mimecast-update-block-sender-policy: Updates a block-sender policy.
- mimecast-create-antispoofing-bypass-policy: Creates an anti spoofing bypass policy.
- mimecast-update-antispoofing-bypass-policy: Updates an anti spoofing bypass policy.
- mimecast-create-address-alteration-policy: Creates an address alteration policy.
- mimecast-update-address-alteration-policy: Updates an address alteration policy.
- mimecast-update-address-alteration-policy: Updates an address alteration policy.
- 34386
Download
2.5.8 - R3481649 (May 21, 2025)
- 39133
Download
Integrations
Mimecast v2
- Fixed an issue where the fetch-incidents command only fetched 100 incidents in a fetch cycle. Set the Incidents Fetch Interval to a maximum of 15 minutes if the number of incidents is expected to exceed the specified max fetch limit in each fetch cycle.
- Added the Max fetch limit parameter. Default value is 100, maximum value is 200. This parameter allows to manually configure the maximum fetch limit for each incident type.
- Breaking changes: Make sure to set the Incidents Fetch Interval to a maximum of 15 minutes if the number of incidents is expected to exceed the specified max fetch limit in each fetch cycle.
- Documentation and metadata improvements.
- Updated the Docker image to: demisto/python3:3.12.8.1983910.
Mimecast Event Collector
- Documentation and metadata improvements.
Scripts
MimecastFindEmail
- Documentation and metadata improvements.
- 39133
Download
2.5.5 - R2040490 (January 22, 2025)
- 37786
- 37174
Download
Integrations
Mimecast v2
- Updated the mimecast-get-group-members command to support the all_results argument, enabling the retrieval of all results.
- Updated the mimecast-get-group-members command to respect the limit argument. If the limit argument exceeds the API's default limit, the command will retrieve data up to the specified limit using pagination, instead of defaulting to the API's limit.
- Updated the Docker image to: demisto/python3:3.11.10.116949.
- 37786
- 37174
Download
2.5.2 - 1605511 (November 7, 2024)
- 37050
Download
Integrations
Mimecast v2
- Fixed an issue where the mimecast-query command did not function correctly when both the sentTo and sentFrom arguments were provided simultaneously.
- Fixed an issue where the mimecast-query command failed when using the subject argument due to an incorrect search query.
- 37050
Download
2.5.1 - 1512684 (October 15, 2024)
- 36672
- 36641
Download
Integrations
Mimecast v2
- Added the configuration parameter Incidents Fetch Interval.
- Added the argument notes to the mimecast-add-group-member command.
- Added the context output Mimecast.Group.Users.Notes to the mimecast-get-group-members command.
- Updated the Docker image to: demisto/python3:3.11.10.111526.
- 36672
- 36641
Download
2.3.0 - 1098002 (June 17, 2024)
- 34386
Download
Integrations
Mimecast v2
Added support for API 2.0 with client id and secret id parameters.
Deprecated the command mimecast-update-policy. Use mimecast-update-block-sender-policy instead.
Deprecated the command mimecast-create-policy. Use mimecast-create-block-sender-policy instead.
Deprecated the command mimecast-list-blocked-sender-policies. Use mimecast-list-policies instead.
Added support for additional types of policies in the mimecast-get-policy command .
Added support for additional types of policies in the mimecast-delete-policy command .
Updated the integration to add the following commands:
- mimecast-get-archive-search-logs: Retrieves archive search logs.
- mimecast-get-search-logs: Retrieves the search logs.
- mimecast-get-view-logs: Retrieves the email view logs.
- mimecast-list-account: Retrieves the summary information for a Mimecast account.
- mimecast-list-policies: Retrieves a list of policies of a specified type.
- mimecast-create-block-sender-policy: Creates a block-sender policy.
- mimecast-update-block-sender-policy: Updates a block-sender policy.
- mimecast-create-antispoofing-bypass-policy: Creates an anti spoofing bypass policy.
- mimecast-update-antispoofing-bypass-policy: Updates an anti spoofing bypass policy.
- mimecast-create-address-alteration-policy: Creates an address alteration policy.
- mimecast-update-address-alteration-policy: Updates an address alteration policy.
- mimecast-update-address-alteration-policy: Updates an address alteration policy.
- 34386
Download
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | July 19, 2020 | |
| Last Release | June 15, 2025 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
