This action extends the Email Alert action by additionally attaching the matched message to the email alert as a
.eml file. It is especially useful for sending user reports from Sublime to another system for further investigation (for example, your SOAR).
See the Email Alert page for more information on the behavior and configuration of these alerts.
Updated 4 months ago