sophos_clawback_email
Removes a delivered email from recipient mailboxes to remediate threats such as phishing, malware, or spam.
Instructions
Initiate post-delivery clawback/remediation for a delivered email. Removes the message from recipient mailboxes.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| reason | No | Reason for clawback (e.g. 'phishing', 'malware', 'spam') | |
| tenant_id | Yes | Tenant UUID | |
| message_id | Yes | Message ID to claw back | |
| recipients | No | Specific recipient email addresses to clawback from (omit to target all recipients) |