🚫 Mimecast Cloud Gateway Targeted Threat Protection - DEPRECATED

Solution: MimecastTTP

🚫 Deprecated: This solution has been deprecated and replaced by a newer integration.

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Solutions Index

Attribute	Value
Publisher	Mimecast
Support Tier	Partner
Support Link	https://mimecastsupport.zendesk.com/
Categories	Security - Network
Version	3.0.2
Author	Mimecast - dlapi@mimecast.com
First Published	2022-02-24
Last Updated	2022-02-24
Solution Folder	MimecastTTP
Marketplace	Azure Marketplace · Popularity: ⚪ Very Low (0%)

The data connector for Mimecast Targeted Threat Protection provides customers with the visibility into security events related to the Targeted Threat Protection inspection technologies within Microsoft Sentinel. The data connector provides pre-created dashboards to allow analysts to view insight into email based threats, aid in incident correlation and reduce investigation response times coupled with custom alert capabilities.
The Mimecast products included within the connector are:

URL Protect
Impersonation Protect
Attachment Protect

Microsoft Sentinel Solutions provide a consolidated way to acquire Microsoft Sentinel content like data connectors, workbooks, analytics, and automations in your workspace with a single deployment step.

NOTE: This integration is considered deprecated and has been replaced by the unified Mimecast integration, which uses Mimecast's API 2.0 gateway. Please avoid using this version, and if already using it, migrate to the new integration. No further updates will be performed, and this version will be removed at a future date. For additional information, including the unified integration setup steps, go here.

Data Connectors
Tables Used
Content Items

Data Connectors

This solution does not include data connectors.

This solution may contain other components such as analytics rules, workbooks, hunting queries, or playbooks.

Tables Used

This solution queries 3 table(s) from its content items:

Table	Used By Content
`MimecastTTPAttachment_CL`	Analytics, Workbooks
`MimecastTTPImpersonation_CL`	Analytics, Workbooks
`MimecastTTPUrl_CL`	Analytics, Workbooks

Content Items

This solution includes 4 content item(s):

Content Type	Count
Analytic Rules	3
Workbooks	1

Analytic Rules

Name	Severity	Tactics	Tables Used
Mimecast Targeted Threat Protection - Attachment Protect	High	InitialAccess, Discovery	`MimecastTTPAttachment_CL`
Mimecast Targeted Threat Protection - Impersonation Protect	High	Exfiltration, Collection, Discovery	`MimecastTTPImpersonation_CL`
Mimecast Targeted Threat Protection - URL Protect	High	InitialAccess, Discovery	`MimecastTTPUrl_CL`

Workbooks

Name	Tables Used
MimecastTTPWorkbook	`MimecastTTPAttachment_CL` `MimecastTTPImpersonation_CL` `MimecastTTPUrl_CL`

Release Notes

Version	Date Modified (DD-MM-YYYY)	Change History
3.0.2	06-03-2025	Solution Deprecated
3.0.1	05-12-2023	Enhanced Dataconnector to use existing workspace and updated checkpoint mechanism
3.0.0	23-08-2023	Initial Solution Release