Get access to immediate incident response assistance.
Eliminate active threats with 24/7 threat detection, investigation, and response.
Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.
Advance your cybersecurity program and get expert guidance where you need it most.
Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.
Prevent unauthorized access and exceed compliance requirements.
Stop email threats others miss and secure your organization against the #1 ransomware attack vector.
Prepare for the inevitable with 24/7 global breach response in-region and available on-site.
Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.
In Exchange mailflow, Distribution Groups are expanded into the individual recipient addresses before a message is passed to agents such as the ECM Exchange Agent. ECM User Matching will not match the distribution group address because it is not in the list of addresses provided in the meta-data of the message.
However the message file includes the text of the To: header and other headers of the message. These text headers do provide the original recipient information, including the SMTP address associated with a Distribution Group. You can use ECM Header Matching rule conditions to match Distribution Groups.
To set up a header matching condition:
To contact Trustwave about this article or to request support: