Configure Advanced Settings
After configuring basic settings for a threat mailbox, you can proceed to configure a few advanced settings, such as the allowed emails, intel creation preferences, and folder synchronization while adding a Threat Mailbox account. However, you can also configure these settings after you successfully add an account.
To configure the advanced settings after adding an account, do the following:
In the Threat Mailbox, click the ellipsis on the top right corner of the screen.
Select Advanced Settings.
To approve a set of email addresses to receive emails from, select Allowed Emails and enter the email addresses and click Save.
To configure intel creation preferences and regulatory email preferences for emails received from senders using this setting, select Intel Creation Preferences.
To assign default metadata values for TLP, confidence score, and tags to the report object while creating intel for emails received from a Threat Mailbox account, select Assign Default Metadata to Report.
To assign the default metadata to all objects while creating intel for emails received from a specific Threat Mailbox account, select Apply Default Metadata to all objects.
To automatically create intel for all emails received in a specific Threat Mailbox account, select Create Intel from all received emails. You can also choose to include attachments and IOCs to the intel. You can view the created intel as a report in Threat Data.
Note
To enable automatic intel creation, ensure that the required folders in your mailbox have synchronization enabled. For example, enabling synchronization for the All Mail folder creates intel for all received emails. To enable synchronization, see step 5.
To differentiate emails from a specific source under a category for focused consideration, select Mark all received Emails as Regulatory Emails.
To include attachments as artifacts and include IOCs from attachments for specified emails, go to
Filter by Specific Email(s).
Click Save.
To segregate mails in various folders based on their importance, select Folder Synchronization, and choose the folders to appear in your threat mailbox account.
You can choose which folder they want to sync and manage intel creation preferences for emails received in a folder.
Click Save.
Note
The settings configured here apply only to the selected threat mailbox account.