Sort inbox by manually resolved
RespondidaCurrently you can filter your inbox by "Received", "In Review" and "Resolved" I would like to have a filter button that would only show the items that were resolved by a user interaction and excludes the ones that were completed by a rule.
This would help when looking at resolved emails to find new indicators to add into yara rules.
-
Seth,
We wanted to do the same thing, we accomplished this by using the messages tags. We created a tag called "autoresolved" and then used the actions setting "Add Tags" to apply the "autoresolved" tag to all messages that the action processed. We then created 2 rooms, 1 with messages that had the tag and 1 with messages that didn't. This allowed us to audit the messages that were autoresolved by using 1 room. Use the other room to look for messages that could be automated in the future.
Por favor, entrar para comentar.
Comentários
2 comentários