I have this working going out to a webmail account. The email that is sent is only text so it gets passed straight through without triggering our anti-virus/malware scanning.
Can the email be made to have an attachment (I want to send a Word document with a macro inside it). I specifically want to have the AV trigger as that is effectively a different email route. This will then also allow us to look for backlogs and delays on sending email with attachments.
Sorry, the sensor has no option for attachments. It may be possible by creating a custom round trip sensor by setting up an EXE/Script Sensor using a PowerShell Script to send such email and interpret the reaction. Currently we have no out-of-the-box solution or similar script that already does this.
Kind regards.
Jan, 2016 - Permalink