IBM Security QRadar SOAR

 View Only
  • 1.  Rasterize email (.eml file)

    Posted Wed March 30, 2022 12:30 PM
    Hi, using O365 integration I am able to save e-mail (.eml file) as an incident attachment. I'm hoping to rasterize the email (into .png or .jpg format) within Resilient. Anyone know if this is possible?

    ------------------------------
    Mark Aksen
    ------------------------------


  • 2.  RE: Rasterize email (.eml file)

    Posted Thu March 31, 2022 09:16 AM
    Hi Mark

    There is no function the Exchange Online integration to convert .eml to .png or .jpg format.
    You are welcome to submit an RFE in the AHA portal: AHA

    AnnMarie

    ------------------------------
    AnnMarie Norcross
    ------------------------------



  • 3.  RE: Rasterize email (.eml file)

    Posted Fri April 01, 2022 07:02 AM
    Hello AnnMarie,

    Is it possible to see inbound emails as text (not base64 encoded) on Email tab?

    ------------------------------
    Alexey Fedorov
    ------------------------------



  • 4.  RE: Rasterize email (.eml file)

    Posted Thu April 07, 2022 02:39 PM
    Mark, at one point, I had a proof of concept integration which would extract the HTML body of a message. Using selenium and chromedriver, it was possible to open Chrome using a base64-encoded data URL to have a screenshot taken and returned.

    ------------------------------
    Lucas Raab
    ------------------------------