CCX Add-on for Mimecast (ETP)

About Us: CyberCX is Australia’s greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk. Description: CCX Security Operations has taken it upon ourselves to update and improve the existing Mimecast for Splunk Add-on to ensure it is as CIM compliant as possible. This TA was built using a large dataset and endeavours to be the most CIM compliant comprehensive field extraction TA available for Mimecast. The Technical Addon is to be used as an extension of the publicly available TAs on Search Heads and is based on the latest version. Features: - This TA currently supports logtypes tagged under the following CIM datamodels: Email, Authentication, Change, Malware, Data Loss Prevention (DLP), and Intrusion Detection (IDS). Attribution: CyberCX acknowledges the foundation work done by the Mimecast Services team to provide this TA.