IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Rasterize email (.eml file)

    Posted Wed March 30, 2022 12:30 PM
    Hi, using O365 integration I am able to save e-mail (.eml file) as an incident attachment. I'm hoping to rasterize the email (into .png or .jpg format) within Resilient. Anyone know if this is possible?

    ------------------------------
    Mark Aksen
    ------------------------------


  • 2.  RE: Rasterize email (.eml file)

    Posted Thu March 31, 2022 09:16 AM
    Hi Mark

    There is no function the Exchange Online integration to convert .eml to .png or .jpg format.
    You are welcome to submit an RFE in the AHA portal: AHA

    AnnMarie

    ------------------------------
    AnnMarie Norcross
    ------------------------------

    Original Message


  • 3.  RE: Rasterize email (.eml file)

    Posted Fri April 01, 2022 07:02 AM
    Hello AnnMarie,

    Is it possible to see inbound emails as text (not base64 encoded) on Email tab?

    ------------------------------
    Alexey Fedorov
    ------------------------------

    Original Message


  • 4.  RE: Rasterize email (.eml file)

    Posted Thu April 07, 2022 02:39 PM
    Mark, at one point, I had a proof of concept integration which would extract the HTML body of a message. Using selenium and chromedriver, it was possible to open Chrome using a base64-encoded data URL to have a screenshot taken and returned.

    ------------------------------
    Lucas Raab
    ------------------------------

    Original Message


Related Content