avanan_security_events

You can automate quarantine for phishing events by filtering security events by type, severity, and date range, then executing quarantine actions. This Skill supports searching and acting on threats detected within specific timeframes.

Triage Avanan security events across multiple tenants using MSP-wide Smart API operations. You can filter events by type, severity, status, sender, and recipient for comprehensive threat investigation and management.

Yes, you can retrieve detailed information for specific security events, including URLs, attachments, and threat intelligence. This supports retroactive remediation and helps triage potential false positives effectively.

Mark quarantined email threats as safe or release them by executing action commands on specific security events. The Skill automates these actions alongside searching and retrieving event details within your environment.

Yes, filtering security events by sender and recipient address is fully supported. You can also filter by event type, severity, status, and date range to isolate specific threats for investigation and remediation.

Use retroactive remediation for malware threats when integrating new threat intelligence data. This allows you to search historical security events and apply actions like quarantine to previously undetected threats.