Email Theater Overview

The Mandiant Advantage Security Validation (MA-SV) Email Theater is an advanced feature that extends the capabilities of the platform. Email Theater lets you validate and tune email security tools, such as Office 365, Proofpoint, Symantec, Mimecast, and Cisco Email Security Appliance (ESA) or Cloud Email Security (CES).

Your email controls are designed to stop inbound phishing, emails containing malware, and data leaving the production IT environment. Email Theater uses a dedicated email account to send threats, like malware and spearphishing links, into the enterprise and send sensitive information, like PII and PCI data, out of the enterprise to test your email controls using a Network Actor.

Setting up Email Theater comprises the following steps:

1. Configure and test Email settings for the Director (see Email Settings).
2. Add at least one Email Profile (see Email Profiles).
3. Add at least one Email Rule (see Email Rules).
4. Add Email Actions (see Creating Email Actions).
5. Run Email Actions (see Running Email Actions).

Supported Protocols

Email Theater supports the following protocols.