Experimental

Download 639
Last updated Oct 27, 2026

sonar-ioc-update-email

Updates the reputation and risk of the given Email indicator. Nothing is changed unless reputation or risk is specified.

sonar-ioc-update-email resource=VALUE [reputation=VALUE] [risk=VALUE]
resource=VALUE
Required. Email indicator value to update
reputation=VALUE
Optional. One of UNKNOWN, BENIGN, SUSPICIOUS, MALICIOUS
risk=VALUE
Optional. One of BENIGN, LOW, MEDIUM, HIGH

Output Fields

FieldTypeNameDescription
emailStringIndicator ValueUpdated indicator value
reputationStringReputationReputation applied, in lowercase. Absent if reputation was not specified.
riskStringRiskRisk applied, in lowercase. Absent if risk was not specified.