Email Alert Configuration in Google SecOps via SOAR (EmailV2)

An example on how to configure it with a gmail address.

This account uses an App password to authenticate to Gmail.
 

Thank you for your response.
Just to clarify, which password should be used for the EmailV2 integration — the Google SecOps password or the specific SOAR email mailbox (Outlook) password? We are using Outlook/Office 365 email (not Gmail) for sending alert emails, so I would like to confirm whether the Outlook service mailbox password or app password should be used for SMTP/IMAP authentication in SOAR. Please confirm the recommended approach.
Thanks for your support.

You need to use your email credentials, in your case, Outlook/Microsoft.

Okay, could you please guide me on how to create a playbook using EmailV2 for successfully sending alert emails to recipients? While creating a new playbook and adding the EmailV2 task, it is asking for SMTP and IMAP server details in order to send the email. I would like to confirm where and how these details should be configured so that the playbook can execute successfully and send alert notifications without errors. Any step-by-step guidance or reference documentation would be greatly appreciated.

 

Hello,
Based on your comment, “We are using Outlook/Office 365 email,” I would recommend taking a look at the following document, which explains how to create an integration in SecOps and send email using an app registration in Azure:
https://docs.cloud.google.com/chronicle/docs/soar/marketplace-integrations/microsoft-graph-mail

It’s easier to set up, and you won’t need to create an integration with your IMAP server.