Skip to main content

Get Original Email - EWS v2

This Playbook is part of the EWS Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.1.0 and later.

This v2 playbook retrieves the original email in the thread as an eml file by using the EWS v2 integration. This playbook will retrieve the email as an eml and not as an Email object (like the previous version). It also reduces the amount of tasks needed to perform the fetch action. You must have the necessary permissions in the EWS integration to execute global search: eDiscovery.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • EWS v2

Scripts#

  • IsIntegrationAvailable

Commands#

  • ews-search-mailbox
  • ews-get-items-as-eml

Playbook Inputs#


NameDescriptionDefault ValueRequired
TargetMailboxThe target mailbox for which retrieve the eml file.Optional
MessageIDThe InReplyTo header in the forwarded email.Optional

Playbook Outputs#


PathDescriptionType
FileThe original email as an eml file.string

Playbook Image#


Get Original Email - EWS v2