Skip to main content
Create a remediation incident by Message ID, File hash or a URL contained in an Email. Required application permissions: Services | Threat Remediation | Edit.
External DocumentationTo learn more, visit the Mimecast documentation.

​
Basic Parameters

ParameterDescription
File HashThe file hash contained in the email that should be remediated.
Incident TypeThe type of the identifier to remediate by.
Message IDsA comma separated or JSON list of message IDs of the emails that should be remediated.
ReasonThe reason of the remediation.
URLAn URL present in the email that should be remediated.

​
Advanced Parameters

ParameterDescription
End TimeTime of the most recent message to be remediated.
Start TimeTime of the earliest message to be remediated.

​
Example Output

{
	"fail": [],
	"meta": {
		"status": 200
	},
	"data": [
		{
			"code": "String",
			"create": "String",
			"failed": "String",
			"fileRemediationCanBeCancelled": true,
			"fileRemediationCancelled": "string",
			"fileRemediationExpiryTime": "string",
			"id": "string",
			"identified": 1,
			"modified": "string",
			"reason": "string",
			"remediatedBy": "string",
			"removeFromDevice": "string",
			"restored": 1,
			"searchCriteria": {},
			"successful": 1,
			"type": "string"
		}
	]
}

​
Workflow Library Example

Create Remediation Incident with Mimecast and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop