Email Events

[debaduttar]

Hi,
I am new to OCSF and trying to understand the schema.
How Email Delivery Finding event (Finding category) and Email Activity Event (System Activity category) are related? Do they exist independent of each other? Why they are not in the same category?

Apologies for the very basic question but will appreciate if I can get a answer👍 .

Regards
Deb

[ablyler]

The email finding classes got removed a few hours ago: c299fdc

I am unsure when the schema website will be updated to reflect this, but the idea is to use the activity events and the malware profile if it contains an attack. Does this fit your use case?

[debaduttar]

Yes, it does clear my confusion and fits my use case. I can see Email related classes in Network activity now.
Many thanks.