Integrate Microsoft 365 with the Cortex Advanced Email Security Module - Cortex Advanced Email Security Microsoft 365 integration including permissions and settings. - Administrator Guide - Cortex XDR - Cortex - Security Operations

Deploy the Cortex Advanced Email Security module to collect data from your organization's email network and to generate issues when suspicious activity is detected. To use the Cortex Advanced Email Security module, activate it and then configure the integration permissions and add the email collector as a data source to Cortex XDR.

Define remediation actions to be run for the email security issues.

To configure each set of actions, do the following: