InsightConnect Marketplace

Microsoft Office 365 Email

Back to Marketplace

Microsoft Office 365 Email

v4.1.4

The Microsoft Office 365 email plugin enables phishing analysis and email management. The plugin includes the ability to manage and remediate suspicious email

Tags: Microsoft, Email, Message, Office 365

Triggers
  • Email Received
  • Email Added to Folder

Actions
  • Delete Email
  • Get Email from User
  • Move Email
  • Send Email

Description

The Microsoft Office 365 plugin for Rapid7 InsightConnect allows users to monitor, manage, and send emails. The plugin can start workflows on new incoming email, get the contents of that email, and pass that to email analysis tools. The plugin will also manage email in the case where remediation is needed. In addition, this plugin can automate the sending of e-mail for alerting and notification purposes.

This plugin utilizes the Microsoft Graph API to communicate with Office 365 Email services.

For more information on this plugin, please see our Office 365 setup documentation here.

Key Features

  • Ability to trigger on incoming emails
  • Manage suspicious email
  • Send email

Requirements

  • Azure Application with correct permissions. See the setup guide for more information.
  • Azure Application ID
  • Azure Directory ID
  • Azure Application Secret

Documentation

Setup

Check out the plugin guide for more details on how to configure this plugin.

The connection configuration accepts the following parameters:

Name Type Default Required Description Enum Example
app_id string None True The ID of the registered app that obtained the refresh token None None
app_secret credential_secret_key None True The secret of the registered app that obtained the refresh token None None
tenant_id string None True The ID of the directory that identifies the tenant None None

Example input:

{
    "app_id": "c74afz10-p56f-49j5-bf24-1bc9we4lj25",
    "app_secret": {
        "secretKey": "aWeBzEYyxL5k+YRnD0Ojcy9GkCvqZX1UPq7ZLLKQ1Zg="
    },
    "email": "user@example.com",
    "tenant_id": "5z884244-w18c-4gh1-96zx-7b656dvf8f36"
}

Technical Details

Actions

Get Email from User

This action is used to get a list of emails from a user's mailbox matching search terms.

Input
Name Type Default Required Description Enum Example
body_contains string None False Body contains this word or phrase None Click here
from_contains string None False From address contains this (can be full e-mail address or just a domain) e.g. user@example.com or example.com None example.com
mailbox_id string None True Target user to retrieve email from None user@example.com
max_number_to_return integer 250 False Maximum number of emails to return. Max limit is 250 (default) None 250
subject_contains string None False Subject contains this word or phrase None Free

Example input:

{
  "body_contains": "Click Here",
  "from_contains": "example.com",
  "mailbox_id": "user@example.com",
  "max_number_to_return": 250,
  "subject_contains": "Free Stuff"
}
Output
Name Type Required Description
email_list []icon_email False List of emails

Example output:

[
  {
     "icon_email":{
        "account":"user@example.com",
        "attached_emails":[
        ],
        "attached_files":[
        ],
        "body":"This is some test body text",
        "categories":[
        ],
        "date_received":"2019-08-21T17:00:35Z",
        "flattened_attached_emails":[
        ],
        "flattened_attached_files":[
        ],
        "has_attachments":false,
        "headers":[
           {
              "name":"Received",
              "value":"from DM6PR12MB2603.namprd12.prod.outlook.com (2603:10b6:5:14c::32) by DM6PR12MB2603.namprd12.prod.outlook.com with HTTPS via DM6PR11CA0055.NAMPRD11.PROD.OUTLOOK.COM; Wed, 21 Aug 2019 17:00:35 +0000"
           },
           {
              "name":"Received",
              "value":"from CY4PR1201CA0007.namprd12.prod.outlook.com (2603:10b6:910:16::17) by DM6PR12MB2603.namprd12.prod.outlook.com (2603:10b6:5:49::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2178.16; Wed, 21 Aug 2019 17:00:34 +0000"
           }
        ],
        "id":"AAMkADI3Mzc1ZTg3LTIzYWEtNDNmNi1hZDQ5LTBiMjAzYzA3ZThhYwBGAAAAAAAxDvrPc8q6SqGLTJ9iB-SGBwC8UQDN7ObVSLWQuxHJ-dDTAAAAAAEMAAC8UQDN7ObVSLWQuxHJ-dDTAAFBpW1BAAA=",
        "is_read":false,
        "recipients":[
           "user@example.com"
        ],
        "sender":"user@example.com",
        "subject":"Test Subject"
     }
  }
]

Delete Email

This action is used to delete an email by ID.

Input
Name Type Default Required Description Enum Example
email_id string None True ID of email to delete None AAMkADI3Mzc1ZTg3LTIzYWEtNDNmNI1hZDQ5LTBiMjAyY5A3ZThhYwBGAAAAAAAxDvrQc8q6SqGLTJ9iB-SGBwC8UQDN7ObVSLWQuxHJ-dDTAAAAAAEJAAC8UQDN7ObVSLWQuxHJ-dDTAAHPCj-HAAA=
mailbox_id string None True User mailbox ID to delete from None user@example.com

Example input:

{
  "email_id": "AAMkADI3Mzc1ZTg3LTIzYWEtNDNmNI1hZDQ5LTBiMjAyY5A3ZThhYwBGAAAAAAAxDvrQc8q6SqGLTJ9iB",
  "message_id": "user@example.com"
}
Output
Name Type Required Description
success boolean True Was delete successful

Example output:

{
    "success": true
}

Move Email

This action is used to move an email to a destination folder.

Input
Name Type Default Required Description Enum Example
email_id string None True The email ID to retrieve None AAMkADI3Mzc1ZTg3LTIzYWEtNDNmNI1hZDQ5LTBiMjAyY5A3ZThhYwBGAAAAAAAxDvrQc8q6SqGLTJ9iB-SGBwC8UQDN7ObVSLWQuxHJ-dDTAAAAAAEJAAC8UQDN7ObVSLWQuxHJ-dDTAAHPCj-HAAA=
folder_name string None True The destination folder name None Inbox
mailbox_id string None True Mailbox ID None user@example.com

Example input:

{
  "email_id": "ASDFXJALNASDFASDFweraswrreASDAFDASDF=|None|AAMkADI3Mzc1ZTg3LTIzYWEtNDNmNI1hZDQ5LTBiMjAyY5A3ZThhYwBGAAAAAAAxDvrQc8q6SqGLTJ9iB-SGBwC8UQDN7ObVSLWQuxHJ-dDTAAAAAAEJAAC8UQDN7ObVSLWQuxHJ-dDTAAHPCj-HAAA=",
  "folder_name": "Inbox",
  "mailbox_id": "user@example.com"
}
Output
Name Type Required Description
success boolean False Was move successful

Example output:

{
  "success": true
}

Send Email

This action is used to send an email.

Input
Name Type Default Required Description Enum Example
attachment file None False Attachment None VGhpcyBpcyBhIHRlc3Q=
bcc []string None False Blind carbon copy recipients None ['user@example.com', 'user@example.com']
body string None True Body of the email None The workflow succeeded
cc []string None False Carbon copy recipients None ['user@example.com', 'user@example.com']
email_from string None True Email address this email will be sent from None user@example.com
email_to string None True Email address of recipients None user@example.com
is_html boolean None True Is the body of this email HTML None False
subject string None True Subject of the email None Alert from ICON

Example input:

{
  "attachment": {
    "content": "VGhpcyBpcyBzb21lIHRleHQ=",
    "filename": "text.txt"
  },
  "bcc": ["user@example.com","user@example.com"],
  "body": "<H1>Hello!</H1>",
  "cc": ["user@example.com","user@example.com"],
  "email_from": "user@example.com",
  "email_to": "user@example.com",
  "is_html": true,
  "subject": "Sent from InsightConnect"
}
Output
Name Type Required Description
success boolean True Success

Example output:

{
  "success": true
}

Triggers

Email Received

This trigger is used to poll mailbox for new email.

Input
Name Type Default Required Description Enum Example
flatten_attachments boolean False True Will return all attachments as flat lists instead of nested emails None False
folder_name string None False Common values are Calendar, Trash, Drafts, Inbox, Outbox, Sent, Junk, Tasks, Contacts. You can also use a completely custom value, for example python_mailing_list. Mailbox names are case-sensitive. Folder GUID may be specified as well None Inbox
interval integer 15 False How often to poll for new email in seconds None 15
mailbox_id string None True The mailbox to monitor for incoming email None user@example.com
subject_query string False Query to search for in subject (regex capable). Only these email will activate this trigger None You have a new message

Example input:

{
  "flatten_attachments": false,
  "folder_name": "Inbox",
  "interval": 15,
  "mailbox_id": "user@example.com",
  "subject_query": "You have a new message"
}
Output
Name Type Required Description
icon_email icon_email False Email

Example output:

{
   "icon_email":{
      "account":"user@example.com",
      "attached_emails":[

      ],
      "attached_files":[

      ],
      "body":"This is some test body text",
      "categories":[

      ],
      "date_received":"2019-08-21T17:00:35Z",
      "flattened_attached_emails":[

      ],
      "flattened_attached_files":[

      ],
      "has_attachments":false,
      "headers":[
         {
            "name":"Received",
            "value":"from DM6PR12MB2603.namprd12.prod.outlook.com (2603:10b6:5:14c::32) by DM6PR12MB2603.namprd12.prod.outlook.com with HTTPS via DM6PR11CA0055.NAMPRD11.PROD.OUTLOOK.COM; Wed, 21 Aug 2019 17:00:35 +0000"
         },
         {
            "name":"Received",
            "value":"from CY4PR1201CA0007.namprd12.prod.outlook.com (2603:10b6:910:16::17) by DM6PR12MB2603.namprd12.prod.outlook.com (2603:10b6:5:49::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2178.16; Wed, 21 Aug 2019 17:00:34 +0000"
         }
      ],
      "id":"AAMkADI3Mzc1ZTg3LTIzYWEtNDNmNi1hZDQ5LTBiMjAzYzA3ZThhYwBGAAAAAAAxDvrPc8q6SqGLTJ9iB-SGBwC8UQDN7ObVSLWQuxHJ-dDTAAAAAAEMAAC8UQDN7ObVSLWQuxHJ-dDTAAFBpW1BAAA=",
      "is_read":false,
      "recipients":[
         "user@example.com"
      ],
      "sender":"user@example.com",
      "subject":"Test Subject"
   }
}

Email Added to Folder

This trigger is used to monitor folder for added emails.

Input
Name Type Default Required Description Enum Example
flatten_attachments boolean False True Will return all attachments as flat lists instead of nested emails None False
folder_name string None True Common values are Calendar, Trash, Drafts, Inbox, Outbox, Sent, Junk, Tasks, Contacts. You can also use a completely custom value, for example python_mailing_list or a folder GUID. Mailbox names are case-sensitive None Inbox
interval integer 15 False How often to poll for new email in seconds None 15
mailbox_id string None True The mailbox to monitor for new email None user@example.com
subject_query string False Query to search for in subject (regex capable). Only these email will activate this trigger None You have a new message

Example input:

{
  "flatten_attachments": false,
  "folder_name": "Inbox",
  "interval": 15,
  "mailbox_id": "user@example.com",
  "subject_query": "You have a new message"
}
Output
Name Type Required Description
icon_email icon_email False Email

Example output:

{
   "icon_email":{
      "account":"user@example.com",
      "attached_emails":[

      ],
      "attached_files":[

      ],
      "body":"This is some test body text",
      "categories":[

      ],
      "date_received":"2019-08-21T17:00:35Z",
      "flattened_attached_emails":[

      ],
      "flattened_attached_files":[

      ],
      "has_attachments":false,
      "headers":[
         {
            "name":"Received",
            "value":"from DM6PR12MB2603.namprd12.prod.outlook.com (2603:10b6:5:14c::32) by DM6PR12MB2603.namprd12.prod.outlook.com with HTTPS via DM6PR11CA0055.NAMPRD11.PROD.OUTLOOK.COM; Wed, 21 Aug 2019 17:00:35 +0000"
         },
         {
            "name":"Received",
            "value":"from CY4PR1201CA0007.namprd12.prod.outlook.com (2603:10b6:910:16::17) by DM6PR12MB2603.namprd12.prod.outlook.com (2603:10b6:5:49::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2178.16; Wed, 21 Aug 2019 17:00:34 +0000"
         }
      ],
      "id":"AAMkADI3Mzc1ZTg3LTIzYWEtNDNmNi1hZDQ5LTBiMjAzYzA3ZThhYwBGAAAAAAAxDvrPc8q6SqGLTJ9iB-SGBwC8UQDN7ObVSLWQuxHJ-dDTAAAAAAEMAAC8UQDN7ObVSLWQuxHJ-dDTAAFBpW1BAAA=",
      "is_read":false,
      "recipients":[
         "user@example.com"
      ],
      "sender":"user@example.com",
      "subject":"Test Subject"
   }
}

Custom Output Types

This plugin does not contain any custom output types.

Troubleshooting

This plugin does not contain any troubleshooting information.

Version History

  • 4.1.4 - Fix instance where headers could use the wrong variable names in output
  • 4.1.3 - Add docs_url to plugin spec with link to plugin setup guide
  • 4.1.2 - Update to add example input
  • 4.1.1 - Fix issue where multipart/alternative may not have a content-type which resulted in a crash
  • 4.1.0 - Added folder modified trigger | Added capability to explicitly specify folder GUID in the New Message Received trigger folder name field which allows any folder to be monitored
  • 4.0.2 - New spec and help.md format for the Extension Library
  • 4.0.1 - Fix issue where Email would break up URLs with quoted-printable characters
  • 4.0.0 - Update to unify Microsoft Message Received trigger and increase stability | Fixes issue where unicode emails could crash the trigger | Update for more robust error handling
  • 3.0.0 - Fix issue where Email Received trigger could fail on a malformed attachment | Update to add option to remove Microsoft Newlines to Email Received | Update to add option to remove Microsoft Newlines to Get Raw Email by ID
  • 2.5.0 - Update to make Get Microsoft Message from ID return attachments if available
  • 2.4.0 - Update to make Microsoft Message Received trigger return attachments if available
  • 2.3.0 - New trigger Microsoft Message Received
  • 2.2.0 - New actions Get Folder ID by Name, Move Message and Get Folders
  • 2.1.2 - Fix issue where only the first ten folders were searched when looking for a specific folder
  • 2.1.1 - Fix issue where Get Attachment IDs could fail with invalid output
  • 2.1.0 - New trigger Email ID Received | New actions: Get Raw Email from ID, Get Microsoft Message from ID, Get Attachment IDs from Microsoft Message, Get Microsoft Attachment by ID, Get Microsoft Extended Item Attachment, Get Raw Attachment by ID
  • 2.0.4 - Fix issue in Email Received trigger where a soft newline in the body of the email causes a line break
  • 2.0.3 - Fix issue where Microsoft .msg was not returned
  • 2.0.2 - Fix issue where attachments were not flattened | Fix issue where correct account wasn't used in Get Message from User
  • 2.0.1 - Fix issue where content_type_to_parse is undefined
  • 2.0.0 - Update to align output with standard email plugin signature | Fix issue to retrieve address attachments in attachments
  • 1.3.0 - Update to add raw_attachments to email type
  • 1.2.2 - Update to add better logging
  • 1.2.1 - Update to support child folders
  • 1.2.0 - Update to add get messages from user
  • 1.1.0 - Update to add delete email action
  • 1.0.3 - Update to add only_new_email to Email Received trigger
  • 1.0.2 - Fix issue where mailbox_name was not working
  • 1.0.1 - Fix issue in Email Received trigger where plugin crashes when new messages are not found
  • 1.0.0 - Initial plugin

Links

References

plugin_spec_version: v2
extension: plugin
products: ["insightconnect"]
name: microsoft_office365_email
title: Microsoft Office 365 Email
description: The Microsoft Office 365 email plugin enables phishing analysis and email management. The plugin includes the ability to manage and remediate suspicious email
version: 4.1.4
vendor: rapid7
support: rapid7
status: []
resources:
  vendor_url: https://www.microsoft.com/
  docs_url: https://insightconnect.help.rapid7.com/docs/office365
tags:
- Microsoft
- Email
- Message
- Office 365
hub_tags:
  use_cases: [threat_detection_and_response, alerting_and_notifications]
  keywords: [Microsoft, Email, Message, Office 365]
  features: []

types:
  header:
    name:
      type: string
      required: false
    value:
      type: string
      required: false

  attachment_file:
    file_name:
      type: string
      required: false
    content:
      type: string
      required: false
    content_type:
      type: string
      required: false

  attachment_email_nested_two:
    id:
      type: string
      title: ID
      required: false
    sender:
      type: string
      required: false
    subject:
      type: string
      required: false
    body:
      type: string
      required: false
    categories:
      type: '[]string'
      required: false
    headers:
      type: '[]header'
      required: false
    attached_files:
      type: '[]attachment_file'
      required: false
    attached_emails:
      type: '[]object'
      required: false
    account:
      type: string
      required: false
    recipients:
      type: "[]string"
      required: false
    has_attachments:
      type: boolean
      required: false

  attachment_email_nested:
    id:
      type: string
      title: ID
      required: false
    sender:
      type: string
      required: false
    subject:
      type: string
      required: false
    body:
      type: string
      required: false
    categories:
      type: '[]string'
      required: false
    headers:
      type: '[]header'
      required: false
    attached_files:
      type: '[]attachment_file'
      required: false
    attached_emails:
      type: '[]attachment_email_nested_two'
      required: false
    account:
      type: string
      required: false
    recipients:
      type: "[]string"
      required: false
    has_attachments:
      type: boolean
      required: false

  attachment_email:
    id:
      type: string
      title: ID
      required: false
    sender:
      type: string
      required: false
    subject:
      type: string
      required: false
    body:
      type: string
      required: false
    categories:
      type: '[]string'
      required: false
    headers:
      type: '[]header'
      required: false
    attached_files:
      type: '[]attachment_file'
      required: false
    attached_emails:
      type: '[]attachment_email_nested'
      required: false
    account:
      type: string
      required: false
    recipients:
      type: "[]string"
      required: false
    has_attachments:
      type: boolean
      required: false

  icon_email:
    id:
      type: string
      title: ID
      required: false
    account:
      type: string
      title: Account
      required: false
      description: Account for which the email was found on
    is_read:
      type: boolean
      title: Is Read
      required: false
      description: Whether or not the email has been read
    sender:
      type: string
      required: false
    subject:
      type: string
      required: false
    body:
      type: string
      required: false
    attached_files:
      type: '[]attachment_file'
      required: false
    attached_emails:
      type: '[]attachment_email'
      required: false
    flattened_attached_emails:
      type: '[]attachment_email'
      required: false
    flattened_attached_files:
      type: '[]attachment_file'
      required: false
    categories:
      type: '[]string'
      required: false
    headers:
      type: '[]header'
      required: false
    recipients:
      type: "[]string"
      required: false
    has_attachments:
      type: boolean
      required: false

connection:
  tenant_id:
    title: Tenant ID
    description: The ID of the directory that identifies the tenant
    type: string
    required: true
  app_id:
    title: App ID
    description: The ID of the registered app that obtained the refresh token
    type: string
    required: true
  app_secret:
    title: App Secret
    description: The secret of the registered app that obtained the refresh token
    type: credential_secret_key
    required: true

triggers:
  email_received:
    title: Email Received
    description: Poll mailbox for new email
    input:
      mailbox_id:
        title: Mailbox ID
        type: string
        description: The mailbox to monitor for incoming email
        example: user@example.com
        required: true
      folder_name:
        title: Folder Name
        type: string
        description: Common values are Calendar, Trash, Drafts, Inbox, Outbox, Sent,
          Junk, Tasks, Contacts. You can also use a completely custom value, for example
          python_mailing_list. Mailbox names are case-sensitive. Folder GUID may be specified as well
        example: Inbox
        required: false
      interval:
        type: integer
        description: "How often to poll for new email in seconds"
        default: 15
        example: 15
        required: false
      subject_query:
        title: Subject Query
        type: string
        description: Query to search for in subject (regex capable). Only these email will activate this trigger
        default: ''
        example: You have a new message
        required: false
      flatten_attachments:
        title: Flatten Attachments
        type: boolean
        description: Will return all attachments as flat lists instead of nested emails
        required: true
        example: false
        default: false
    output:
      icon_email:
        title: Email
        type: icon_email
        required: false
        description: Email
  folder_modified:
    title: Email Added to Folder
    description: Monitor folder for added emails
    input:
      mailbox_id:
        title: Mailbox ID
        type: string
        description: The mailbox to monitor for new email
        example: user@example.com
        required: true
      folder_name:
        title: Folder Name
        type: string
        description: Common values are Calendar, Trash, Drafts, Inbox, Outbox, Sent,
          Junk, Tasks, Contacts. You can also use a completely custom value, for example
          python_mailing_list or a folder GUID. Mailbox names are case-sensitive
        example: Inbox
        required: true
      interval:
        type: integer
        description: "How often to poll for new email in seconds"
        default: 15
        example: 15
        required: false
      subject_query:
        title: Subject Query
        type: string
        description: Query to search for in subject (regex capable). Only these email will activate this trigger
        default: ''
        example: You have a new message
        required: false
      flatten_attachments:
        title: Flatten Attachments
        type: boolean
        description: Will return all attachments as flat lists instead of nested emails
        required: true
        example: false
        default: false

    output:
      icon_email:
        title: Email
        type: icon_email
        required: false
        description: Email
actions:
  get_email_from_user:
    title: Get Email from User
    description: Get a list of emails from a user's mailbox matching search terms
    input:
      mailbox_id:
        title: Mailbox ID
        type: string
        description: Target user to retrieve email from
        example: user@example.com
        required: true
      max_number_to_return:
        title: Max Number to Return
        type: integer
        default: 250
        description: Maximum number of emails to return. Max limit is 250 (default)
        example: 250
        required: false
      from_contains:
        title: From
        type: string
        description: From address contains this (can be full e-mail address or just a domain) e.g. user@example.com or example.com
        example: example.com
        required: false
      subject_contains:
        title: Subject
        type: string
        description: Subject contains this word or phrase
        example: Free
        required: false
      body_contains:
        title: Body
        type: string
        description: Body contains this word or phrase
        example: Click here
        required: false
    output:
      email_list:
        title: Email List
        type: '[]icon_email'
        description: List of emails
        required: false
  delete_email:
    title: Delete Email
    description: Delete an email by ID
    input:
      email_id:
        title: Email ID
        type: string
        description: ID of email to delete
        example: AAMkADI3Mzc1ZTg3LTIzYWEtNDNmNI1hZDQ5LTBiMjAyY5A3ZThhYwBGAAAAAAAxDvrQc8q6SqGLTJ9iB-SGBwC8UQDN7ObVSLWQuxHJ-dDTAAAAAAEJAAC8UQDN7ObVSLWQuxHJ-dDTAAHPCj-HAAA=
        required: true
      mailbox_id:
        title: Mailbox ID
        type: string
        description: User mailbox ID to delete from
        example: user@example.com
        required: true
    output:
      success:
        title: Success
        type: boolean
        description: Was delete successful
        required: true
  move_email:
    title: Move Email
    description: Move an email to a destination folder
    input:
      mailbox_id:
        title: Mailbox ID
        description: Mailbox ID
        example: user@example.com
        type: string
        required: true
      email_id:
        title: Email ID
        description: The email ID to retrieve
        example: AAMkADI3Mzc1ZTg3LTIzYWEtNDNmNI1hZDQ5LTBiMjAyY5A3ZThhYwBGAAAAAAAxDvrQc8q6SqGLTJ9iB-SGBwC8UQDN7ObVSLWQuxHJ-dDTAAAAAAEJAAC8UQDN7ObVSLWQuxHJ-dDTAAHPCj-HAAA=
        type: string
        required: true
      folder_name:
        title: Folder Name
        description: The destination folder name
        example: Inbox
        type: string
        required: true
    output:
      success:
        title: Success
        type: boolean
        description: Was move successful
        required: false
  send_email:
    title: Send Email
    description: Send an email
    input:
      email_from:
        type: string
        title: Email Sender
        description: Email address this email will be sent from
        example: user@example.com
        required: true
        order: 1
      email_to:
        type: string
        title: Email To
        description: Email address of recipients
        example: user@example.com
        required: true
        order: 2
      subject:
        title: Subject
        type: string
        description: Subject of the email
        example: Alert from ICON
        required: true
        order: 3
      body:
        title: Body
        type: string
        description: Body of the email
        example: The workflow succeeded
        required: true
        order: 4
      is_html:
        title: Is HTML
        type: boolean
        description: Is the body of this email HTML
        example: false
        required: true
        order: 5
      bcc:
        title: BCC
        type: '[]string'
        description: Blind carbon copy recipients
        example: ['user@example.com', 'user@example.com']
        order: 6
        required: false
      cc:
        title: CC
        type: '[]string'
        description: Carbon copy recipients
        example: ['user@example.com', 'user@example.com']
        order: 7
        required: false
      attachment:
        type: file
        description: Attachment
        example: VGhpcyBpcyBhIHRlc3Q=
        order: 8
        required: false
    output:
      success:
        title: Success
        type: boolean
        description: Success
        required: true
Other plugins
Fortinet FortiGate
Rapid7   |   v4.0.3
Plugin
Get
McAfee Advanced Threat Defense
Rapid7   |   v1.5.0
Plugin
Get
Ivanti Security Controls
Rapid7   |   v1.3.0
Plugin
Get
Base64
Rapid7   |   v1.1.5
Plugin
Get
Jira
Rapid7   |   v6.0.0
Plugin
Get