How to Configure the Email Collector
Learn how to set up and use DigitalStakeout’s Email Collector to forward emails into XTI for analysis, monitoring, or intelligence use cases.
How to Use the Email Collector
The Email Collector lets you route selected email communications into your DigitalStakeout XTI console using a virtual inbox. This is especially useful for collecting content from external alerts, newsletters, or research channels — centralizing them for structured analysis and enrichment.
Primary Use Cases
- 📬 Subscribe to Feeds or Alerts — Pipe threat feeds, newsletters, or platform alerts into XTI
- 🕵️ Analyze Suspicious Messages — Forward spam or phishing emails for investigation
- 📊 Centralize Organization Comms — Capture executive, security, or supplier communications for visibility
- 🧰 Integrate Other Security Tools — Forward alerts from third-party security platforms for correlation
Setup Instructions
Step 1: Access the Collector Setup
- Navigate to the Setup page
- Click on the Collectors tab
Step 2: Add a New Email Monitor
- Click Add Monitor
- Choose Create XTI Inbox (Email Monitor)
- Enter a Name (required)
- Optional: Add notes or tags for context
Step 3: Define Accepted Senders
Pattern | Meaning |
---|---|
[email protected] | Accepts mail from one email address |
@example.com | Accepts all mail from this domain |
*.* | Accepts mail from any source |
Use
*.*
cautiously — it opens the inbox to all senders.
Step 4: Save & Retrieve Your Virtual Email
- Click Save
- You’ll receive a confirmation email titled “Your XTI Inbox is Ready”
- You can also view the virtual address by editing the monitor after setup
Email Collection & Analysis
- Forward or subscribe to content using the virtual address
- Each incoming email is processed and stored in your XTI feed as an event
- You can filter, tag, or analyze these like any other data source
Managing the Email Collector
- Deleting the Email Monitor will immediately purge all associated messages
- You can edit allowed senders, tags, or descriptions at any time
Tips for Use
- ✅ Use separate email monitors per use case (e.g., one for vendor alerts, one for threat feeds)
- 🧪 Combine with Keyword Feed to tag inbound messages by threat type
- 🔗 Link alerts from other tools (e.g., VirusTotal, Abuse.ch) for inline intelligence enrichment
Want to learn more about use cases and coverage?
Visit the Email Collector feature page on our main site.
Updated 2 days ago