Jump to Content

Documentation API Reference

Documentation API Reference

Getting Started

Introduction
Installation
- Docker
- AWS CloudFormation
Add a message source
User-reported phishing
- Add your abuse mailbox
- Gmail's "Report phishing" feature
MQL Rules
- Detection Rules
- Triage Rules
Actions
Rule Feeds
- Private rule feed authentication
- Rules file format (YAML)
Lists
- Configure the org_vips list
YARA

Reference

Message Data Model (MDM)
Message Query Language (MQL)
Message groups
Message types
Role-Based Access Control (RBAC)
Message Access Controls
Rule Severity

How-to Guides

How to set up a custom domain
How to set up Single sign-on (SSO)

How-to MQL Guides

How to detect keywords or phrases in the body content of messages
How to detect lookalike domains
How to detect text in attachments
How to use message header values in a rule

Powered by

Message Data Model (MDM)

A standardized JSON schema for representing an email message.

Updated about 1 year ago