Mimecast

Mimecast Logo

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Attribute	Value
Publisher	Mimecast
Support Tier	Partner
Support Link	https://mimecastsupport.zendesk.com/
Categories	domains
Version	3.1.0
Author	Mimecast - dlapi@mimecast.com
First Published	2024-09-10
Last Updated	2024-09-10
Solution Folder	Mimecast
Marketplace	Azure Marketplace · Popularity: 🟢 High (85%)

An Azure app to enable Mimecast data to be viewed using analytical tables and charts which are brought into Azure.

Data Connectors
Tables Used
Content Items

Data Connectors

This solution provides 5 data connector(s):

🔶 CLv1: This connector ingests into a table that uses the legacy Custom Log V1 schema format with type-suffixed column names (e.g. _s, _d, _b, _t, _g). Note: identification is based on column name suffixes which are also permitted in CLv2, so this classification may not always be accurate.

Tables Used

This solution uses 11 table(s):

Table	Used By Connectors	Used By Content
`Audit_CL`	Mimecast Audit	Analytics, Workbooks
`Awareness_Performance_Details_CL`	Mimecast Awareness Training	-
`Awareness_SafeScore_Details_CL`	Mimecast Awareness Training	Workbooks
`Awareness_User_Data_CL`	Mimecast Awareness Training	Workbooks
`Awareness_Watchlist_Details_CL`	Mimecast Awareness Training	Workbooks
`Cloud_Integrated_CL`	Mimecast Cloud Integrated	Workbooks
`Seg_Cg_CL`	Mimecast Secure Email Gateway	Analytics, Workbooks
`Seg_Dlp_CL`	Mimecast Secure Email Gateway	Analytics, Workbooks
`Ttp_Attachment_CL`	Mimecast Targeted Threat Protection	Analytics, Workbooks
`Ttp_Impersonation_CL`	Mimecast Targeted Threat Protection	Analytics, Workbooks
`Ttp_Url_CL`	Mimecast Targeted Threat Protection	Analytics, Workbooks

Content Items

This solution includes 30 content item(s):

Content Type	Count
Analytic Rules	13
Parsers	11
Workbooks	5
Playbooks	1

Analytic Rules

Name	Severity	Tactics	Tables Used
Mimecast Audit - Logon Authentication Failed	High	Discovery, InitialAccess, CredentialAccess	`Audit_CL`
Mimecast Data Leak Prevention - Hold	Informational	Exfiltration	`Seg_Dlp_CL`
Mimecast Data Leak Prevention - Notifications	High	Exfiltration	`Seg_Dlp_CL`
Mimecast Secure Email Gateway - AV	Informational	Execution	`Seg_Cg_CL`
Mimecast Secure Email Gateway - Attachment Protect	High	Collection, Exfiltration, Discovery, InitialAccess, Execution	`Seg_Cg_CL`
Mimecast Secure Email Gateway - Impersonation Protect	High	Discovery, LateralMovement, Collection	`Seg_Cg_CL`
Mimecast Secure Email Gateway - Internal Email Protect	High	LateralMovement, Persistence, Exfiltration	`Seg_Cg_CL`
Mimecast Secure Email Gateway - Spam Event Thread	Low	Discovery	`Seg_Cg_CL`
Mimecast Secure Email Gateway - URL Protect	High	InitialAccess, Discovery, Execution	`Seg_Cg_CL`
Mimecast Secure Email Gateway - Virus	Informational	Execution	`Seg_Cg_CL`
Mimecast Targeted Threat Protection - Attachment Protect	High	InitialAccess, Discovery	`Ttp_Attachment_CL`
Mimecast Targeted Threat Protection - Impersonation Protect	High	Exfiltration, Collection, Discovery	`Ttp_Impersonation_CL`
Mimecast Targeted Threat Protection - URL Protect	High	InitialAccess, Discovery	`Ttp_Url_CL`

Workbooks

Name	Tables Used
Mimecast_Audit_Workbook	`Audit_CL`
Mimecast_Awareness_Training_Workbook	`Awareness_SafeScore_Details_CL` `Awareness_User_Data_CL` `Awareness_Watchlist_Details_CL`
Mimecast_Cloud_Integrated_Workbook	`Cloud_Integrated_CL`
Mimecast_SEG_Workbook	`Seg_Cg_CL` `Seg_Dlp_CL`
Mimecast_TTP_Workbook	`Ttp_Attachment_CL` `Ttp_Impersonation_CL` `Ttp_Url_CL`

Playbooks

Name	Description	Tables Used
Mimecast-Data-Connector-Trigger-Sync	Playbook to sync timer trigger of all Mimecast data connectors.	-

Parsers

Name	Description	Tables Used
Mimecast_AT_Performane_Detail	-	-
Mimecast_AT_Safe_Score	-	-
Mimecast_AT_User_Data	-	-
Mimecast_AT_Watchlist	-	-
Mimecast_Audit	-	-
Mimecast_Cloud_Integrated	-	-
Mimecast_SEG_CG	-	-
Mimecast_SEG_DLP	-	-
Mimecast_TTP_Attachment	-	-
Mimecast_TTP_Impersonation	-	-
Mimecast_TTP_Url	-	-

Release Notes

Version	Date Modified	Change History
3.1.0	29-10-2025	Added Log Ingestion API support in Data Connectors. Added Government button for support.
3.0.1	12-02-2025	Updated default table for MimecastAudit to get the Connected label on Data Connector UI page.
3.0.0	09-09-2024	Initial Solution Release