A cloud-based email security platform protecting organizations against phishing, ransomware, impersonation, and zero-day threats. It also includes email archiving, continuity, and security awareness training in a single integrated solution.
.avif)
What is Mimecast?
Mimecast is a cloud-based email security platform that sits in front of an organization's email infrastructure, inspecting every inbound and outbound message for threats before delivery. Its detection capabilities cover phishing, spear phishing, business email compromise, ransomware attachments, malicious URLs, and impersonation attacks that spoof trusted domains or individuals. Beyond threat detection, Mimecast provides email archiving for compliance and e-discovery purposes, email continuity services that maintain access during outages, and security awareness training for end users. The platform generates detailed message logs that capture the full delivery journey of every email, including threat verdicts, URL rewrite history, and attachment sandbox results. These logs are a valuable source for SOC investigations involving email-based attack vectors.
How does Mimecast work with Qevlar?
Qevlar integrates with Mimecast to retrieve email threat data during phishing and BEC investigations. When an alert involves a suspicious email campaign, Qevlar can query Mimecast logs to identify the full scope of delivery, determine which users were targeted, and retrieve sandbox verdicts for any associated attachments or URLs.
Want to help your analysts focus on the most critical alerts?
Frequently asked questions
What is Mimecast?
Mimecast is a cloud email security platform that inspects inbound and outbound mail for phishing, ransomware, impersonation and zero-day threats, with email archiving, continuity and security-awareness training built in.
What can you do with Mimecast in Qevlar?
Qevlar can query Mimecast during phishing and BEC investigations — identifying the full scope of a malicious campaign's delivery, determining which users were targeted and retrieving threat verdicts for associated URLs and attachments.
Does Qevlar investigate email threats automatically with Mimecast?
Yes. When an alert involves a suspicious email campaign, Qevlar pulls the relevant message tracking and threat data and reaches a verdict without manual log review.
Can Qevlar map the full reach of a phishing campaign?
Yes. Using Mimecast message data, Qevlar determines exactly who received a malicious message and how it was handled, so the scope of exposure is clear.
Other integrations
%2525202.webp)
