IBM Security SOAR

Prerequisit : have the Utility Functions integration installed and configured Link to App Exchange Purpose : Enhance the standard information given by this integration in Artifact Description & Note and remove the Action button Email Parsing (Artifact) if already done Changes : New Rule Email Parsing (Artifact) and Email Parsing (Attachment) New Workflows Email Parsing Artifact as duplicate of the Example: Email Parsing Artifact with changes in post process scripts Email Parsing Attachment as duplicate of the Example: Email Parsing Attachment with changes in post process scripts Previous Rules from this package can be desactivated or removed Results in Note: from Attachement from Artifact and in Artifact description: Attached is the res file to import this configuration. Feel free to use, change, adapt this code to your usage. Building the res file: resilient-circuits extract --workflow "email_parsing_artifact" "email_parsing_attachment" --rule "Email Parsing (Artifact)" "Email Parsing (Attachment)" -o config_MAILparser.res --zip