Microsoft EWS Extension

Version: 1.3
Updated: Oct 06, 2023

Perform actions on Microsoft EWS mailboxes, accounts, and security settings.

Actions

• Message Trace (Enrichment) - Trace an email message.
• Get Client Access (Enrichment) - Gather mailbox application access information.
• Update Client Access (Containment) - Adjust mailbox application access.
• Change Mailbox Status (Containment) - Enable/disable mailbox status.
• Block IP (Containment) - Block a sender IP.
• Block Sender (Containment) - Block a sender email address.
• Unblock IP (Containment) - Unblock a sender IP.
• Unblock Sender (Containment) - Unblock a sender email address.
• List Quarantine Emails (Enrichment) - List quarantined mails.
• Remove Email From Quarantine (Containment) - Remove emails from quarantine.
• Release Email From Quarantine (Containment) - Release emails from quarantine.
• Get Mailbox (Enrichment) - Fetch a specific domain or specific user mailbox.
• Get Mailbox Folder (Enrichment) - Fetch a specific folder for mailbox.
• List Spam Filter Policies (Enrichment) - Sender allow list and Sender block list.
• List Connection Filter Policies (Enrichment) - Listing of Allow IP and Block IP.
• List Malware Filter Policies (Enrichment) - List the policies for filtering malwares.
• List Spam Filter Rule (Enrichment) - List the Rules for filtering Spam.
• Delete User (Containment) - Delete the mailbox and the associated user account.
• Add New User (Containment) - Create a mailbox and user account at the same time.
• List Users (Enrichment) - List existing user objects in your organization. This action returns all objects that have user accounts (for example, user mailboxes, mail users, and user accounts).
• Remove Member From Distribution Group (Containment) - Remove a single member from distribution groups or mail-enabled security groups.
• Add Member To Distribution Group (Containment) - Add a single recipient to distribution groups and mail-enabled security groups.
• List Distribution Group (Enrichment) - List existing distribution groups or mail-enabled security groups.
• Get Distribution Group Members (Enrichment) - Get the members of distribution groups and mail-enabled security groups.

Configure Microsoft EWS Extension in Automation Service and Cloud SOAR

Before you can use the integration, you must configure it so that the vendor can communicate with Sumo Logic. For general guidance, see Configure Authentication for Integrations.

1. Access App Central and install the integration.
2. Select the installed integration in the Integrations page.
   Classic UI. In the main Sumo Logic menu, select Automation and then select Integrations in the left nav bar.
   New UI. In the main Sumo Logic menu, select Automation > Integrations. You can also click the Go To... menu at the top of the screen and select Integrations.
3. Select the integration.
4. Hover over the resource name and click the Edit button that appears.
   
5. In the Add Resource dialog, enter the authentication needed by the resource. When done, click TEST to test the configuration, and click SAVE to save the configuration.

For information about Microsoft EWS, see Microsoft Exchange Web Services documentation.

Change Log

• April 12, 2019 - First upload
• September 4, 2019 - New actions added
• September 24, 2019 - Additional optional parameters added to Update Client Access action
• March 10, 2022 - Logo
• October 17, 2022 (v1.1) - New Actions:
  • Delete User
  • Add New User
  • List Users
  • Remove Member From Distribution Group
  • Add Member To Distribution Group
  • List Distribution Group
  • Get Distribution Group Members
• July 19, 2023 (v1.2) - Removed leading/trailing spaces
• October 6, 2023 (v1.3) - Integration Updated