Message platform for automated threat simulation, reporting, detection, and remediation
摘要
說明書
In some embodiments, the service account can use an API provided by the email server to receive information about user activity at the email server as a result of the subscription to the user account, including the user inbox. In some embodiments, the subscription provides information about actions having taken place with respect to the user email inbox. The subscription can cause updates to be sent to the management server. Some subscription APIs may offer multiple methods of subscription, as non-limiting examples including push, pull, and stream. The systems described herein may be configured to use any method of subscription.
Setting up and configuring the on-demand functionality can include the following high-level tasks: Creating an Exchange Server service account that the system can use to subscribe to an organization's Exchange Server mailbox for proof-of-life events for on-demand scenarios; and configuring the connection between the system and Exchange Server by identifying the server in the system and providing login credentials to that server. When the on-demand feature is enabled for a scenario, the system uses the secure Exchange Server connection to subscribe to recipients' Microsoft Outlook activity and send the scenario email directly to the inbox of recipients who are actively performing email tasks in Outlook. The system reports which emails were delivered and which are in a pending state (waiting to be sent). The system connects to and searches Exchange Server mailboxes by way of a privileged Exchange Server service account.
