0 Replies · Latest reply on Dec 11, 2017 1:53 PM by Charles Leggett

    Can the Security Incident Response module receive emailed attachments?

      From my testing, ...

       

      If I send an email with an attachment to an email address that creates a (Service) Incident, the attachment is added to the INC record.

       

      However, if I do the same to an email address that creates a Security Request, the attachment doesn't show up in the SR.

       

      I tried to modify this behavior by updating the SecOps Email Parsing rules, but in general the capabilities there seem incomplete.

       

      It looks like you can only create transforms that act on the subject and/or body of email.

       

      Does anyone had any experience with this and/or ideas on how to receive attachments in the SecOps SIR module?