Try in Splunk SOAR


Accepts a gmail email ID, and then attempts to delete the email from the mailbox. GMail does not have a "soft-delete" option, messages run through the Message Eviction playbook will be permanently deleted.

  • Type: Response
  • Product: Splunk SOAR
  • Apps: G Suite for GMail
  • Last Updated: 2024-01-21
  • Author: Lou Stella, Splunk
  • ID: 5299d3ad-e9c4-4afa-b051-92cacd0ff916
  • Use-cases:
    • Phishing

Associated Detections

How To Implement

This input playbook requires the G Suite for GMail connector to be configured. It is designed to work in environments that posess a maximum of 500 mailboxes at this time, due to a limitation in the G Suite for GMail connector.


ID Technique Definition Category
D3-ER Email Removal The file removal technique deletes malicious artifacts or programs from a computer system. File Eviction

Explore Playbook


Required field


source | version: 1