Current ThreatQ Version Filter
Spearphish Details Pane
Default ThreatQ Role: Administrative, Maintenance, or Primary Contributor
Custom Role - Action Permissions: Objects & Context - Objects
You can update spearphish file details as well as add or delete recipients from the Spearphish Details pane in a Spearphish event's object details page.
Adding a Recipient
- Locate the Spearphish Details pane on the object details page.
- Click the Add Recipients option.
The Add Recipients window is displayed. - Populate the following fields:
- Recipient type - This field defaults to a value of To. Use this field to specify whether the email was sent directly to the recipient (To) or the recipient received it as a carbon copy (CC) or blind carbon copy (BCC).
- Email address - Enter the email address that received the spearphish file.
- Link all emails as related indicators - This field defaults to checked. Leave this box checked to add a releated indicator record to the system object for each email address.
- To add another recipient, click the + button and repeat step 3.
- To save your recipient additions and return to the Spearphish Details pane, click the Add Recipients button.
Deleting a Recipient
- Locate the Spearphish Details pane on the object details page.
- Click the checkbox(es) next to the recipient(s) you want to delete.
- Click the Delete option.
The Are You Sure? window prompts you to confirm your action. - Click the Delete Recipients button.
Editing a Spearphish File
- Locate the Spearphish Details pane on the object details page.
- Click the Edit button.
- Enter your changes in the Email Content field.
- Click the Save button.