Mimecast Administrative Role Changed

Siddhant Mishra@Siddhant

•updated yesterday•0•0•0

Detects a role change on the Mimecast platform. A gateway administrator can read quarantined mail, release held messages and alter policy — so this grant provides both access to content and the ability to control what the organisation receives. Onboarding: MIMECAST is ingested via Syslog (KV) (Bloo extractor 161). Integration guide: https://bloo.io/docs/hypercloud/mimecast-connector BQL (Bloo Query Language): stream=authentication where sourcename='MIMECAST' and action='ROLE_UPDATED' | groupby user, srcip, reason