Multiple sender identifiers on a single CloudSOC incident

Products

• Information Centric Analytics

Issue/Introduction

A number of user records in the RiskFabric relational database contain abnormal e-mail addresses that appear as a concatenated list. For example, this is the recorded e-mail address for a single user in the table dbo.LDW_Users:

'[e-mail], not available, [e-mail], [e-mail], [e-mail], [e-mail], [e-mail], user7@exa'

These user accounts are entering Information Centric Analytics (ICA) from a CloudSOC integration. Most user records contain a single e-mail address, but some contain multiple.

Environment

Release : 6.x

Component : CloudSOC Import Utility

Resolution

This condition will be addressed in a future release of ICA.