Email Data Feed - Changes to JSON output inside Anti-Spam incidents

Products

• Email Security.cloud
• Email Threat Detection and Response

Issue/Introduction

The article informs about changes in JSON output for email metadata.

Environment

Email Data Feed 

Email security cloud

Email Threat Detection & Response

Cause

The changes are made to rationalize the JSON output for email metadata, specifically inside Anti-Spam incidents

Resolution

The detection type and verdict strings are changed for certain combinations, as described in the table below. For example, in an incident where detection type had been “spam-front-end” and the verdict had been “Filtered by Brightmail BEC”, it will henceforth have a detection type of “Brightmail BEC” and a verdict of “Filtered by Brightmail.” 

 

detection type (orig. cust. output)	Verdict (orig. cust. output)	detection type (new customer output)	Verdict (new customer output)
Brightmail BEC	Filtered by Signaturing System	Brightmail BEC	Filtered by Brightmail
Brightmail	Filtered by Signaturing System	Brightmail	Filtered by Brightmail
spam-front-end	Filtered by Brightmail BEC	Brightmail BEC	Filtered by Brightmail