Security Operations Integration- Email Search and Delete capability

concept australia Updated Sep 10, 2026 2 min read email-search-capability.md
Raw file servicenow.com

The Email Search and Delete capability returns the number of threat emails from an email server search and, optionally, returns details for each email found. After the email search is completed, you can delete the emails.

The Email Search and Delete capability has one flow that executes the email search and delete processes.

Note: If no implementations are available, capability actions are not displayed in product menus. Additionally, if none of the Email Search and Delete capability implementations are active, the Email Search related link on a security incident is not displayed.

  • Security Operations Integration - Email Search and Delete flow
    The Security Operations Integration - Email Search and Delete flow returns the number of threat emails from an email server search and, optionally, return details for each email found. After the email search is completed, you can delete the emails.

Parent Topic:Integration capabilities

Related topics

Security Operations Integration- Block Request capability

Security Operations Integration- Enrich CI capability

Security Operations Integration- Enrich Observable capability

Security Operations Integration- Get Network Statistics capability

Security Operations Integration- Get Running Processes capability

Security Operations Integration- Isolate Host capability

Security Operations Integration- Publish to Watchlist capability

Security Operations Integration- Sightings Search capability

Security Operations Integration - Threat Lookup capability

Change the order of flow execution

Search documentation
Search document titles and file paths on the australia branch