Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Security Operations Integration- Email Search and Delete capability

The Email Search and Delete capability returns the number of threat emails from an email server search and, optionally, returns details for each email found. After the email search is completed, you can delete the emails.

The Email Search and Delete capability has one flow that executes the email search and delete processes.

Note: If no implementations are available, capability actions are not displayed in product menus. Additionally, if none of the Email Search and Delete capability implementations are active, the Email Search related link on a security incident is not displayed.

  • Security Operations Integration - Email Search and Delete flow
    The Security Operations Integration - Email Search and Delete flow returns the number of threat emails from an email server search and, optionally, return details for each email found. After the email search is completed, you can delete the emails.

Parent Topic:Integration capabilities

Related topics

Security Operations Integration- Block Request capability

Security Operations Integration- Enrich CI capability

Security Operations Integration- Enrich Observable capability

Security Operations Integration- Get Network Statistics capability

Security Operations Integration- Get Running Processes capability

Security Operations Integration- Isolate Host capability

Security Operations Integration- Publish to Watchlist capability

Security Operations Integration- Sightings Search capability

Security Operations Integration - Threat Lookup capability

Change the order of flow execution