Global Option to configure download email as .txt or .eml/.msg

We understand the rational that as precaution, we want to default put downloading email as .txt

However, we would like to make a global admin option to change behaviro if we have an instance of resilient is only used by Cyber analysts who know what they are dealing with.

I see this idea is related to R-I-451, or as an extension

  • Guest
  • Jul 22 2020
  • Future consideration
  • Attach files
  • Admin
    MARTIN FEENEY commented
    30 Jul, 2020 02:23pm

    FYI, we have a configvar to control the extension of the downloaded email file. download_email_file_extension if you set the value to eml, the downloaded file will have a .eml extension. Not exposed on the UI though. Don't tell anyone :-)

  • Guest commented
    26 Jul, 2020 12:49am

    I agree with this 100% -- An .eml file by itself is not dangerous (links and attachments in it may be), and we constantly are having to rename the downloaded .txt files to .eml files when we need to view emails in our native email client (Outlook).