Mail Configurations
This article section describes how to integrate the Incident Responder module with Google Workspace, Exchange, or Microsoft Office 365 email services. It's crucial to follow the steps accurately. Please contact your email server administrator if you don’t have the required permissions to make these configurations.

Benefit of Email Server Integration

The Incident Responder module investigation tool can detect malicious emails in user inboxes and remove them automatically or can be removed by the admin as well.
Server-based integration with your email service provides the most comprehensive protection. While email investigations can be conducted with the Phishing Reporter plug-in, the user must have Outlook open and the plug-in active for the investigation to be successful. If the Outlook application is closed for any reason, a complete investigation can only be performed using a server-based integration.
The server-based integration has the advantage to start an investigation at any time.

Mail Configurations

Select Incident Responder > Mail Configurations from the left sidebar menu of the dashboard to create a new mail configuration or view the details of an existing configuration.
To set initial configurations, select the appropriate email server integration:
  • ​Office 365
  • Exchange
  • Google Workspace
The integration details are:
Name of the configuration
Email service name to be integrated: Exchange EWS, Office 365, or Google Workspace
An active email address is required for testing purposes
Status of the configuration: (running/not running)
Date Created
Integration start date
Edit/remove the integration


Last modified 6mo ago
Copy link
On this page
Benefit of Email Server Integration
Mail Configurations