Skip to main content

Analyze EML

Action ID: tools.sublime.analyze_eml Analyze an EML message against active detection rules and ML attack score in Sublime. Reference: https://docs.sublime.security/reference/analyzemessage

Secrets

Required secrets:
  • sublime: required values SUBLIME_API_KEY.

Input fields

eml_base64
string
required
Base64-encoded EML file.
base_url
string | null
Base URL of the Sublime API.Default: null.

Analyze URL

Action ID: tools.sublime.analyze_url Analyze a URL with ML link analysis in Sublime. Reference: https://docs.sublime.security/docs/enrichment-functions#mllink_analysis

Secrets

Required secrets:
  • sublime: required values SUBLIME_API_KEY.

Input fields

url
string
required
URL to analyze.
base_url
string | null
Base URL of the Sublime API.Default: null.

Attack score for EML

Action ID: tools.sublime.score_eml Evaluate attack score of an EML message using the Sublime API. Reference: https://docs.sublime.security/reference/attackscoreforrawmessage

Secrets

Required secrets:
  • sublime: required values SUBLIME_API_KEY.

Input fields

eml_base64
string
required
Base64-encoded EML file.
base_url
string | null
Base URL of the Sublime API.Default: "https://platform.sublime.security".

Scan file with BinExplode

Action ID: tools.sublime.scan_file Scan a file with BinExplode. Returns Reference: https://docs.sublime.security/reference/postscan-1

Secrets

Required secrets:
  • sublime: required values SUBLIME_API_KEY.

Input fields

file_base64
string
required
Base64-encoded file.
file_name
string
required
Name of the file.
base_url
string | null
Base URL of the Sublime API.Default: null.