Mimecast Threat Intelligence

What problem does it solve?

This skill helps security analysts investigate Mimecast threat activity, including suspicious URL clicks, malicious attachments, impersonation attempts, and audit events, to quickly understand and remediate security incidents.

Core Features & Use Cases

• Analyze TTP Logs: Review logs for URL protection, attachment protection, and impersonation attempts to identify threats.
• Investigate Incidents: Examine threat remediation incidents for confirmed threats requiring action.
• Audit Event Review: Check audit logs for administrative and security events for compliance and security investigations.
• Use Case: A user reports a suspicious email. Use this skill to check Mimecast's TTP logs for URL clicks and attachment analysis related to that email's sender or content to determine if it was malicious.

Quick Start

Use the mimecast threat intelligence skill to get TTP logs for URL clicks between March 1st and March 2nd, 2026.