IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

Resilient email parse script.

  • 1.  Resilient email parse script.

    Posted Thu September 19, 2019 11:18 AM
    Hi everybody. 
    I will like to add my own artifacts from the "Sample script: process inbound email (v32.2)" in the Customization settings -> Script
    but does someone knows which fileformat the mail is parsed in. 
    I need to have something to write my regex from. 
    The script is from here.
    https://exchange.xforce.ibmcloud.com/hub/extension/4ba70106b6f2dfa77cb1e3c921db7ff5



    ------------------------------
    Philip Wahlstrøm
    ------------------------------