Mimecast

• New held messageRuns when Mimecast puts a message on hold for review.
• Malicious link clickedRuns when someone clicks a link in an email that Mimecast's URL Protect finds malicious.
• Malicious attachment foundRuns when Mimecast's Attachment Protect finds an email attachment malicious.
• Impersonation attempt detectedRuns when Mimecast's Impersonation Protect flags an email posing as someone, such as a lookalike domain or a staff member's name.
• New audit eventRuns when Mimecast records an audit event, such as held mail being released, the archive being searched or a policy changing.

• Search messagesTrack email through Mimecast by sender, recipient, subject, sender IP or message ID, to see whether it was delivered, held, bounced or rejected. Give at least one of these.
• Get message detailsGet a tracked message's delivery, spam check and retention details: its attachments, when it will be purged, and any litigation holds and smart tags.
• List held messagesList messages Mimecast is holding for review across the whole account, with why each was held.
• Release held messagesRelease held messages so they're delivered to their recipients. Up to 25 at a time.
• Reject held messagesReject held messages so they're never delivered, optionally telling the sender.
• List released and rejected messagesList held messages that were released or rejected, with who did it and when.
• Permit or block a senderBlock a sender for one person at your agency, or permit them so their mail skips spam checks for that person.
• Remove a permitted or blocked senderTake a sender off one person's permitted or blocked senders, as 'Permit or block a sender' added them.
• List blocked sender policiesList the account's blocked senders policies: who is blocked, for whom, and whether each is on.
• List link clicksList the links people clicked in email that Mimecast's URL Protect checked, with what it found and did.
• List attachment scansList attachments Mimecast's Attachment Protect opened in its sandbox, with what it found.
• List impersonation attemptsList messages Mimecast's Impersonation Protect flagged as posing as someone, such as a lookalike domain or a staff member's name.
• Decode a protected linkFind where a link Mimecast rewrote (one starting with https://protect-...mimecast.com) really goes.
• Search the archiveSearch archived email by words, mailbox, sender or recipient, attachments and dates, across the whole archive or one mailbox. Returns up to 100 messages.
• Get archived messageGet an archived message's sender, recipients, headers, attachments and a preview of its text.
• List usersList the people and addresses at your agency that Mimecast knows.
• List groupsList Mimecast's profile groups, which policies and permissions apply to.
• List group membersList the addresses and domains in a profile group.
• Create a groupMake a new profile group, at the top level or inside another group.
• Add to a groupAdd an email address or a whole domain to a profile group.
• Remove from a groupRemove an email address or domain from a profile group.
• Delete a groupDelete a profile group. It must have no members or groups inside it.
• List audit eventsList what administrators and users did in Mimecast, such as releasing held mail, searching the archive or changing a policy. Mimecast keeps 60 days.
• List gateway eventsRead one page of the email gateway's event log (mail received, processed and delivered, spam, viruses and threat protection), for sending on to a security log. Mimecast keeps 24 hours. Needs Enhanced Logging turned on in Mimecast.

No actions match that.