Configure a Mail Sender Integration - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

A mail integration enables the server to send emails and can be used for system notifications and playbooks. When you use the mail integration for playbook tasks, you can pass arguments, such as to, subject, and body, to customize the contents of your email.

Cortex XSIAM provides a built-in mail sender integration. It is installed out-of-the-box and does not require you to set up an SMTP server or provide any credentials. Emails sent via the built-in mail sender integration have a watermark that specifies the FQDN and mentions that the mail was sent via Cortex XSIAM. This provides protection against possible abuse of the built-in mail sender.

However, if you want to use a different email sender, you can configure one during your initial setup.