Microsoft Exchange On-Premise EWS

This app performs email ingestion, investigative and containment actions on an on-premise Exchange installation

Supported Actions

• test connectivity: Validate the asset configuration for connectivity using supplied configuration
• run query: Search emails
• delete email: Delete emails
• copy email: Copy an email to a folder
• move email: Move an email to a folder
• get email: Get an email from the server
• list addresses: Get the email addresses that make up a Distribution List
• lookup email: Resolve an Alias name or email address, into mailboxes
• update email: Update an email on the server
• on poll: Ingest emails from the server into Splunk SOAR