Current ThreatQ Version Filter
 

Spearphish Details Pane

THREATQ REQUIRED PERMISSIONS

Default ThreatQ Role: Administrative, Maintenance, or Primary Contributor
Custom Role - Action Permissions: Objects & Context - Objects

You can update spearphish file details as well as add or delete recipients from the Spearphish Details pane in a Spearphish event's object details page.

Adding a Recipient

  1. Locate the Spearphish Details pane on the object details page.
  2. Click the Add Recipients option.
    The Add Recipients window is displayed.
  3. Populate the following fields:
    • Recipient type - This field defaults to a value of To.  Use this field to specify whether the email was sent directly to the recipient (To) or the recipient received it as a carbon copy (CC) or blind carbon copy (BCC).
    • Email address - Enter the email address that received the spearphish file.
    • Link all emails as related indicators - This field defaults to checked.  Leave this box checked to add a releated indicator record to the system object for each email address.
  4. To add another recipient, click the + button and repeat step 3.
  5. To save your recipient additions and return to the Spearphish Details pane, click the Add Recipients button.

Deleting a Recipient

  1. Locate the Spearphish Details pane on the object details page.
  2. Click the checkbox(es) next to the recipient(s) you want to delete.
  3. Click the Delete option.
    The Are You Sure? window prompts you to confirm your action.
  4. Click the Delete Recipients button.

Editing a Spearphish File

  1. Locate the Spearphish Details pane on the object details page.
  2. Click the Edit button.
  3. Enter your changes in the Email Content field.
  4. Click the Save button.