Tuskira and Abnormal Email Security

What Tuskira does with Abnormal Email Security

Ingests email threat data to detect phishing and malicious payloads. Email is still where many attacks start. Tuskira connects Abnormal Email Security so a phishing alert can be followed past the inbox to the endpoint and identity it touched.

How the connection works

The Abnormal Email Security integration is out of the box, so there are no custom pipelines to build or maintain. Tuskira connects through the Abnormal Email Security API and queries data where it lives. That data stays in Abnormal Email Security. Only context and verdicts move, and every agent run is logged with its full reasoning so your team can check the work.

Common questions

Does Tuskira integrate with Abnormal Email Security?

Yes. Abnormal Email Security is one of Tuskira's 200+ out-of-the-box integrations. Tuskira uses it for email threats, detections and message data.

Do I need to move Abnormal Email Security data into a data lake or SIEM?

No. Tuskira queries Abnormal Email Security in place. Nothing is copied into a central lake, so there's no duplicate storage and no extra ingestion cost.

Does Tuskira replace Abnormal Email Security?

No. Tuskira works on top of the tools you already run. Abnormal Email Security keeps doing its job, and Tuskira uses its data so the agents can decide what matters and act on it.

Other Email Security integrations

Tuskira also connects to FortiMail, Microsoft Defender for Office 365, Mimecast and Proofpoint TAP. Browse all integrations.