Check Email Authenticity‎

POST /Command/EmailAuthenticityCheck

Checks email authenticity based on raw email data

Request

Authentication: API keys or JSON web tokens (JWT)

Body Parameters

Parameter Name	Type	Required/Optional	Description
Username	`string`	Required	The username of your D3 SOAR account.
Site	`string`	Required	The D3 SOAR site to run the remote command.
Raw Email Data	`string`	Optional	Raw data of an email

Body Sample Data

application/json

JSON

{
  "Username": "Admin",
  "Site": "Security Operations",
  "CommandParams": {
    "Raw Email Data": "MIME-Version: 1.0\r\nReceived: from user01@example.com 2603:10b6:a03:1a0::47 by 2002:a19:4845:0:0:0:0:0 with HTTP; Thu, 28 May 2020 12:19:28 -0700 (PDT)\r\nFrom: user01 \r\nDate: Thu, 28 May 2020 12:19:28 -0700\r\nMessage-ID: \r\nSubject: Test Send Email\r\nTo: user09 \r\nContent-Type: multipart/alternative; boundary=\"0000000000001d2c8705a6ba354a\"\r\n\r\nHello everyone,\r\nThis is a test email"
  }
}

Response

200 OK

application/json

Response Fields

Field Name	Type	Description
result	`string`	The result data from the API request.
error	`string`	The error message if the command execution failed.
keyFields	`JSON Object`	The key fields from the API request.
returnData	`string`	The return data from the API request.
contextData	`JSON Object`	The context data from the API request.

Sample Data

JSON

{
    "result":"<table class='cc-table horizontal-table'><tr><th>Type</th><th>Validation-Result</th><th>Sender-IP</th><th>Reason</th><th>Signing-Domain</th><th>Tags</th></tr><tr><td>spf</td><td>Unknown</td><td>Unknown</td><td>Unknown</td><td>&nbsp;</td><td>&nbsp;</td></tr><tr><td>dkim</td><td>Unknown</td><td>&nbsp;</td><td>Unknown</td><td>Unknown</td><td>&nbsp;</td></tr><tr><td>dmarc</td><td>Unknown</td><td>&nbsp;</td><td>&nbsp;</td><td>Unknown</td><td>Unknown</td></tr></table>"
    "error": "",
    "keyFields": {
        "Dkim": "Unknown",
        "Dmarc": "Unknown",
        "Spf": "Unknown"
    },
    "returnData": "Succeed",
    "contextData": {
        "spf": {
            "Type": "spf",
            "Validation-Result": "Unknown",
            "Sender-IP": "Unknown",
            "Reason": "Unknown"
        },
        "dkim": {
            "Type": "dkim",
            "Validation-Result": "Unknown",
            "Signing-Domain": "Unknown",
            "Reason": "Unknown"
        },
        "dmarc": {
            "Type": "dmarc",
            "Validation-Result": "Unknown",
            "Tags": "Unknown",
            "Signing-Domain": "Unknown"
        }
    }
}

400 BadRequest

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

JSON

{"Error": "The body of the request must be a valid JSON object"}

401 Unauthorized

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

JSON

{"Error": "Invalid authentication key."}

429 TooManyRequests

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

JSON

{"Error": "The request exceeds rate limits or is otherwise blocked by rate limiting policies."}

500 InternalServerError

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

JSON

{"Error": "Unexpected Error."}