Material Security

Version: 1.3
Updated: Jul 18, 2023

Material Security protects critical data in employee, partner, contractor, and VIP accounts—without hurting productivity. Material finds and redacts sensitive content in email archives and brings it back when you need it, after a simple verification step.

Actions

• Search Cases (Enrichment) - Search into the Cases.
• Get Case Status (Enrichment) - Get Status of a Case.
• Get Case Details (Enrichment) - Get Case Details.
• Update Case Status (Containment) - Update Specific Case.
• List Messages (Enrichment) - List messages from the result of a search using Search Messages Job.
• Override Message (Containment) - Applies one or more overrides to a message that can alter the message in a given mailbox. The target account must have Phishing Herd Immunity enabled for overrides to take effect.
• Get Message Details (Enrichment) - Get details for a single message.
• Get Message Details Batch (Enrichment) - Get message details for a batch of messages.
• Search Messages (Enrichment) - Issues a job with a search query for messages. The result includes groupListId for retrieving the list of messages via the List Messages action.
• Mark Message as Suspicious (Containment) - Indicates that the specified message is suspicious.
• Mark Message Sensitive and Insensitive (Containment) - Indicates that the specified message is sensitive or insensitive.

Configure Material Security in Automation Service and Cloud SOAR

Before you can use the integration, you must configure it so that the vendor can communicate with Sumo Logic. For general guidance, see Configure Authentication for Integrations.

1. Access App Central and install the integration.
2. Select the installed integration in the Integrations page.
   Classic UI. In the main Sumo Logic menu, select Automation and then select Integrations in the left nav bar.
   New UI. In the main Sumo Logic menu, select Automation > Integrations. You can also click the Go To... menu at the top of the screen and select Integrations.
3. Select the integration.
4. Hover over the resource name and click the Edit button that appears.
   
5. In the Add Resource dialog, enter the authentication needed by the resource. When done, click TEST to test the configuration, and click SAVE to save the configuration.

• API URL. Enter your URL.
• API Token. Insert your token.
  

For information about Material Security, see the Material Security website.

Change Log

• June 08, 2022 - First upload
• January 05, 2023 - New actions added, previously developed actions refactored.
• July 5, 2023 (v1.2) - Removed leading/trailing spaces
• July 18, 2023 (v1.3) - Code refactoring