Microsoft Exchange Server is a mail server and calendaring server developed by Microsoft. This integration relies on EWS being enabled for the server.

Connect Exchange with Devo SOAR

1. Navigate to Automations > Integrations.

2. Search for Exchange.

3. Click Details, then the + icon. Enter the required information in the following fields.

4. Label: Enter a connection name.

5. Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.

6. Verify SSL: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).

7. Remote Agent: Run this integration using the Devo SOAR Remote Agent.

8. Server Name/IP: Server Name or IP address for Exchange authentication.

9. Username: Username for Exchange authentication.

10. Password: Password for Exchange authentication.

11. Email Address to use: User to login into Exchange as.

12. Exchange Build Version: Exchange build version in form of 'major_version, minor_version, major_build, minor_build'. Example: '15,0,12,34'

13. Timeout (Optional): Seconds to wait before stopping the authentication request (Default is 30 seconds).

14. After you've entered all the details, click Connect.

Actions for Exchange

Read Email

Pulls emails from a user's inbox.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

Correlated results when Filter By Subject is provided, otherwise uncorrelated results. The output table contains one row per email.

Get Attachments

Pulls the attachments of a set of emails.

Inputs

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing multiple rows of result:

• has_error: True/False

• error: message/null

• msgid: message-id of email

• attachments: json array of attachments

Delete Email

Deletes an email by ID.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing multiple rows of result:

• has_error: True/False

• error: message/null

• msgid: message-id of email

• msg: Successfully deleted email

Mark Email as Read

Marks an email as read by ID.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing multiple rows of result:

• has_error: True/False

• error: message/null

• msgid: message-id of email

• msg: Successfully marked email as read.

Mark Email as Unread

Marks an email as unread by ID.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing multiple rows of result:

• has_error: True/False

• error: message/null

• msgid: message-id of email

• msg: Successfully marked email as unread.

Add Categories

Append categories to an email.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing multiple rows of result:

• has_error: True/False

• error: message/null

• msgid: message-id of email

• msg: Successfully updated email categories.

Replace Categories

Replace an email's categories.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing multiple rows of result:

• has_error: True/False

• error: message/null

• msgid: message-id of email

• msg: Successfully updated email categories.

Remove Categories

Remove categories from an email.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing multiple rows of result:

• has_error: True/False

• error: message/null

• msgid: message-id of email

• msg: Successfully updated email categories.

Send Email

Sends an email to an email address.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing multiple rows of result:

• has_error: True/False

• error: message/null

• msgid: message-id of email

• msg: Successfully sent email

Move Email

Moves an email from one folder to another.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing multiple rows of result:

• has_error: True/False

• error: message/null

• msgid: message-id of email

• msg: Successfully moved email to folder: .

Reply All

Reply All to the Email.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing multiple rows of result:

• has_error: True/False

• error: message/null

• msgid: message-id of email

• msg: Successfully Forwarded e-mail

``` {json}{ "msg": "Successfully Replied to the e-mail", "msgid": "SN4PR22MB2949F6E5FBD8F8E6651DF08BDC8C9@SN4PR22MB2949.namprd22.prod.outlook.com", "has_error": false, "error": null }

Download Quarantine Message

Download Quarantine Message with given message-id. It will take few minutes to run this action, so in case response gets delayed, then timeout limit has to be increased.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

A JSON object containing multiple rows of result:

• has_error: True/False

• error: message/null

• file-id: file-id of downloaded email

``` {json}"data":{3 items "has_error":boolfalse "File-Id ":[1 item 0:string"2ae60eb911a348bbb3bc5120f0976cef.eml" ] "error":NULL }

Download Quarantine Message By Certificate (Deprecated)

Download Quarantine Message with given message-id by certificate auth. It will take few minutes to run this action, so in case response gets delayed, then timeout limit has to be increased

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Output

JSON containing the following items:

{json}"data":{ "has_error":false, "File-Id ":[ "2ae60eb911a348bbb3bc5120f0976cef.eml" ], "error":null }

Release Notes

• v3.0.0 - Updated architecture to support IO via filesystem

• v2.2.1 - Added Build Version optional field at connection level.

• v2.1.1 - Bug fixed for error: global name 'sys' is not defined.

• v2.1.0 - Marked action Download Quarantine Message By Certificate as deprecated.

• v1.14.2 - Added retries in action Download Quarantine Message By Certificate.

• v1.14.1 - Added new action Download Quarantine Message By Certificate.

• v1.13.5 - Performance improvement on 2 actions: Download Quarantine Message List and Download Quarantine Message.

• v1.13.1 - Added certificate option in Quarantine related actions.

• v1.12.3 - Added 2 actions to download the quarantine message and quarantine message list.

• v1.11.0 - Added option to add bcc in send mail action.