ACE icon indicating copy to clipboard operation
ACE copied to clipboard

Extract all e-mails that share the same message-id

Open automationator opened this issue 7 years ago • 0 comments

Currently, when a phish is sent to multiple people and it uses the same message-id, ACE will only extract one of them. However, the email remediation works properly and is able to remediate the same message-id from ALL of the recipients' inboxes.

I don't think that ACE needs to create individual alerts for each of the emails that share the same message-id, but just extracting them all from the archives and placing them inside the same alert would probably suffice. That way when the alert is added to an event, the event page will actually show a record of everyone that received the phish.

automationator avatar Sep 10 '18 13:09 automationator