What kind of audit events can I retrieve?

You can retrieve administrative actions including logins, policy changes, message releases, and API operations for compliance and security auditing.

What are Mimecast TTP logs?

Targeted Threat Protection (TTP) logs record security events related to URL protection, attachment sandboxing, and impersonation detection.

How does this help with Business Email Compromise (BEC)?

The skill monitors impersonation protection logs to identify lookalike domains and spoofed internal senders, allowing for rapid detection of BEC attempts.

Can this skill remove malicious emails from mailboxes?

Yes, it can track and manage 'Threat Remediation Incidents' which include actions such as removing emails from user mailboxes that were reclassified as malicious post-delivery.

Mimecast Threat Intelligence

Name: Mimecast Threat Intelligence
Author: wyre-technology

bywyre-technology

•

安全与测试

Investigates and remediates Mimecast security threats, including malicious URLs, attachments, and impersonation attempts.

This skill empowers Claude to monitor and analyze Mimecast’s Targeted Threat Protection (TTP) ecosystem, providing visibility into real-time URL clicks, sandboxed attachment results, and executive impersonation logs. It enables security teams and MSPs to automate the discovery of phishing campaigns, manage post-delivery threat remediation incidents, and audit administrative actions. By correlating TTP data with audit events, users can ensure a proactive and documented response to sophisticated email-borne threats across their managed environments.

主要功能

01Identify lookalike domains and Business Email Compromise (BEC) attempts

02Track and manage threat remediation incidents for mailbox cleanups

03Monitor real-time URL click events and post-click scan results

04Retrieve administrative audit logs for compliance and forensic investigations

0512 GitHub stars

06Analyze TTP logs for URL, attachment, and impersonation protection

使用场景

01Investigating the scope of phishing campaigns by tracing specific malicious domains across all users

02Detecting and mitigating executive impersonation attempts via lookalike domain analysis

03Automating daily threat reviews to identify users who interacted with blocked malicious links

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add wyre-technology/msp-claude-plugins threat-intelligence

For use in Claude.ai and ChatGPT

主要功能

01Identify lookalike domains and Business Email Compromise (BEC) attempts

02Track and manage threat remediation incidents for mailbox cleanups

03Monitor real-time URL click events and post-click scan results

04Retrieve administrative audit logs for compliance and forensic investigations

0512 GitHub stars

06Analyze TTP logs for URL, attachment, and impersonation protection

使用场景

01Investigating the scope of phishing campaigns by tracing specific malicious domains across all users

02Detecting and mitigating executive impersonation attempts via lookalike domain analysis

03Automating daily threat reviews to identify users who interacted with blocked malicious links

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add wyre-technology/msp-claude-plugins threat-intelligence

For use in Claude.ai and ChatGPT