Create Remediation Incident - Blink Documentation

Integrations

Integrations
1Password
Abnormal
Absolute
AbuseIPDB
Adaptive Shield
Adobe Cloud
ADP
Agari Phishing Response
Airlock
Airlock Digital
Akamai Identity Cloud Social
Alert Logic
AlgoSec Firewall Analyzer
AlienVault OTX
AlienVault USM
Anodot
Ansible
Anvilogic
Any Run
Apex One
ArcSight ESM
Area 1
Asana
Asset Panda
Atlassian User Management
Atlassian User Provisioning
auth0
Authentik
Authomize
Automox
AWS
AWS IAM Identity Center
Axonius
Azure
Azure Data Explorer
Azure DevOps
Azure Log Analytics
Azure Storage
BambooHR
Big Fix
BigPanda
Bitbucket
Bitdefender
Bitsight
Bitwarden
Black Duck
Black Kite
Blink
BMC Remedy
Box
Brinqa
Cato Networks
Censys
Check Point Harmony
Check Point Infinity Events
Check Point XDR-XPR
Check Point Management
Checkmarx One
Checkmarx SAST
Chorus
Chronicle
Cisco Advanced Phishing Protection
Cisco Domain Protection
Cisco Meraki
Cisco Talos
Cisco Umbrella
Cisco Webex
Claroty xDome
ClearPass
ClickHouse
ClickUp
Cloud Custodian
Cloudflare
Cobalt
Compass
Confluence
Confluence Data Center
Coralogix
Coralogix Incident Management
Cortex XDR
Cortex Xpanse
CredStash
Cribl
CrowdStrike
CyberArk
Cybersixgill
CyCognito
Cyera
Cylance
Cyware CTIX
Darktrace
Dasera
Databricks
Datadog
DataSet
Delighted
Delinea
Devo
Discord
Docusign
Domo
Drata
Dropbox
Dropbox Business
Druva
Duo
Duo Auth
Dynatrace
EasyVista
EchoTrail
Egnyte
Egnyte Secure Govern
Elasticsearch
Entro
Ermetic
Exabeam
Exchange Online
Expel
F5 BIG IP
Falcon LogScale
Falcon Surface
Flare.io
Forcepoint DLP
Forescout
FortiGate
Freshservice
GCP
Ghostwriter
Git
GitHub
GitLab
Glean
Gmail
Google Calendar
Google Chat
Google Docs
Google Drive
Google Forms
Google Looker
Google Meet
Google Sheets
Google Workspace
Grafana
Grip Security
GYTPOL
Have I Been Pwned
HiBob
HubSpot
Hunters
Hybrid Analysis
Hyperproof
IBM Cloud
IBM NS1 Connect
IBM X Force
Imperva
incident.io
Infoblox Cloud Services Portal
Integrations
Intercom
Intezer
IP API
IPinfo
IPWHOIS
Ironscales
Ivanti RiskSense
Jamf
JetBrains
JFrog
Jira
Jira Data Center
Joe Sandbox
JumpCloud
Kandji
Keeper Secrets Manager
Kenna Security
KnowBe4
KnowBe4 Events
Kubernetes
Lacework
LaunchDarkly
Linear
Litmos
LogicMonitor
LogRhythm
Manage Engine ServiceDesk Plus
Mattermost
Maven
Microsoft Defender For Cloud
Microsoft Defender For Cloud Apps
Microsoft Defender For Endpoints
Microsoft Defender XDR
Microsoft E-Discovery
Microsoft Entra ID
Microsoft Graph
Microsoft Intune
Microsoft Office 365 Management Activity
Microsoft Outlook
Microsoft Purview
Microsoft Sentinel
Microsoft SQL Server
Microsoft Teams
Mimecast
- Mimecast
- Actions
MISP
Monday
MongoDB Atlas
MxToolbox
Neo4j
NetBox
Netography
Netskope
New Relic
Nightfall AI
NinjaOne
Notion
Nozomi Networks
Nuclei
Nucleus
Nutanix Hypervisor
Obsidian
Okta
OneDrive
OneLogin
OneTrust
OpenAI
OpenCTI
Opsgenie
OPSWAT
Oracle Cloud
Oracle HCM
Orca Security
OWASP ZAP
PagerDuty
Palo Alto Cloud NGFW
Palo Alto Firewall
Panther
Pentera
Perception Point
PhishLabs
PhishLabs Incident Data
PhishLabs Open Web Monitoring
Pingdom
PingID
PingOne
PlexTrac
PortSwigger
Postman
Postman SCIM
Power BI
PowerShell
Prisma Access
Prisma Cloud CSPM
Prisma Cloud CWP
Prometheus
Proofpoint
Proofpoint ITM
Proofpoint Protection Server
Proofpoint Security Awareness Training
Proofpoint TAP
Proofpoint Threat Response Auto Pull
Pub-Sub
QRadar
Qualys
Rapid7
Rapid7 InsightIDR
Rapid7 InsightVM Cloud
Rapid7 Threat Command
Reco
Recorded Future
Red Hat IdM
Rippling
runZero
SafeBase
Sage HR
SailPoint
SailPoint IdentityIQ
Salesforce
SAP Ariba
ScienceLogic
Securin
Securin VI
SecurityScorecard
Securonix
SemGrep
SentinelOne
ServiceNow
SharePoint
Shodan
Shopify
Silverfort
Slack
Smartsheet
Snipe-IT
Snowflake
Snyk
SolarWinds Service Desk
SonarQube
Sophos
Split
Splunk
Splunk Observability
Splunk SOAR
Spur
StrongDM
Sumo Logic
Symantec EDR
Sysdig
Tableau
Tanium
TeamCity
TeamViewer
Telegram
Tenable
Tenable Security Center
Terraform
Terraform Cloud
TheHive
Thinkst Canary
ThreatQuotient
Trellix Email Security
Trello
Trend Vision One
Twilio
UKG HR
Uptycs
URLScan
Vault
Veracode
Verkada
Vertica
VirusTotal
VMware Carbon Black
VMware vSphere
WeChat
WhatsApp
Whois
WildFire
Wiz
Workday
Workspace ONE UEM
YesWeHack
Zendesk
Zero Networks
Zoom
Zscaler Internet Access
Zscaler Private Access

To learn more, visit the Mimecast documentation.

Basic Parameters

Parameter	Description
File Hash	The file hash contained in the email that should be remediated.
Incident Type	The type of the identifier to remediate by.
Message IDs	A comma separated or JSON list of message IDs of the emails that should be remediated.
Reason	The reason of the remediation.
URL	An URL present in the email that should be remediated.

Advanced Parameters

Parameter	Description
End Time	Time of the most recent message to be remediated.
Start Time	Time of the earliest message to be remediated.

Example Output

{    "fail": [],    "meta": {        "status": 200    },    "data": [        {            "code": "String",            "create": "String",            "failed": "String",            "fileRemediationCanBeCancelled": true,            "fileRemediationCancelled": "string",            "fileRemediationExpiryTime": "string",            "id": "string",            "identified": 1,            "modified": "string",            "reason": "string",            "remediatedBy": "string",            "removeFromDevice": "string",            "restored": 1,            "searchCriteria": {},            "successful": 1,            "type": "string"        }    ]}

Workflow Library Example

Create Remediation Incident with Mimecast and Send Results Via Email

Preview this Workflow on desktop

Add Group Member Find Groups

On this page

Basic Parameters
Advanced Parameters
Example Output
Workflow Library Example

Integrations

​Basic Parameters​

​Advanced Parameters​

​Example Output​

​Workflow Library Example​

Basic Parameters

Advanced Parameters

Example Output

Workflow Library Example