Skip to content

sandialabs/scot4-inbox

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

scot4-inbox

Inbox (IMAP/MSGRAPH) processor for SCOT4

Creates a container to run the SCOT4 inbox processor. The processor will read IMAP inboxes and Microsoft Graph API inboxes and insert the contents of those messages into SCOT alerts, events, or dispatches.

This is a convenient way to input data from detection systems, threat intel feeds, and analysts directly into SCOT.

For more information and instructions, consult the main SCOT4 documentaton Repository.