Library / Security & Compliance
Security & Compliance
Parse DMARC Reports into MySQL and Alert Slack
When a DMARC report email arrives over IMAP, it unpacks and parses the records, stores them in MySQL and alerts Slack on problems.
What it does
## How it works - monitor postmaster email for DKIM reprots - unpack report and parse XML - map and format fields for DB input - input into database - send notification on DKIM or SPF failure ## Remember to set up - email input mailbox - notification channels
The steps
- Email Trigger (IMAP)
- End date format
- If multiple records to parse
- Map fields for DB input and parse
- Begin format date
- Input into database
- If issue with DKIM or SPF
- Rename Keys
- Rename column for consistency
- Unzip File
- Extract XML data
- Parse XML data to JSON
- Split Out For Separate Entries
- Slack Post Message On Channel
15 steps in total.
Similar automations