Threat Response integrates with SMA (Security Management Appliance) as an enrichment and enforcement module. The SMA module allows investigators to take actions such as searching email records for sender email and IP, email subject and message header, among other elements.
To integrate your SMA with Threat Response, you may use the quick start guide for SMA, check out our module configuration videos on YouTube, or review the in product configuration steps.
Learn more about Threat Response here, or check out other FAQs here.