checkpoint-avanan

Get detailed threat analysis including IOCs and timeline from Checkpoint Harmony Email

View or toggle email security policies in Checkpoint Harmony Email

Release quarantined email(s) back to recipients in Checkpoint Harmony Email

Search quarantined emails in Checkpoint Harmony Email by various criteria

Search detected threats in Checkpoint Harmony Email by type, severity, and date range

Use this agent when investigating quarantined threats, managing email security events, auditing Avanan tenant configuration, or performing cross-tenant threat sweeps in Check Point Avanan (Harmony Email & Collaboration). Trigger for: Avanan event investigation, Harmony email security, cloud email quarantine, Avanan tenant management, phishing campaign Avanan, Avanan exception management, cross-tenant threat sweep. Examples: "Show me all critical Avanan events today", "Release this quarantined email — it's a false positive", "Sweep all tenants for emails from this phishing domain", "Review and clean up the Avanan whitelist exceptions for Acme Corp"

Use this agent when an MSP needs to audit email security policy completeness and correctness across Avanan (Check Point Harmony Email & Collaboration) managed tenants — verifying anti-phishing coverage, attachment sandboxing, impersonation protection, DLP rules, and exception hygiene. Trigger for: Avanan policy audit, Harmony email policy review, email security policy completeness, anti-phishing policy check, DLP policy audit, impersonation protection review, Avanan tenant compliance, exception justification review. Examples: "Audit email security policies for all tenants and flag any gaps", "Check that impersonation protection covers all executives at Acme Corp", "Review all Avanan policy exceptions and identify ones without documented justification"

Use this skill when working with the Checkpoint Harmony Email API - OAuth2 client credentials authentication, base URLs, rate limiting, pagination, error handling, and common API patterns. Covers token management, request/response formats, and integration best practices. Essential for developers and MSP administrators integrating with the Checkpoint Harmony Email & Collaboration (Avanan) API.

Use this skill when working with Checkpoint Harmony Email security incidents - incident lifecycle, status transitions, investigation workflows, notes and evidence collection, remediation tracking. Covers incident creation, triage, escalation, and closure workflows for email security events. Essential for MSP security analysts managing incident response across customer tenants in Checkpoint Harmony Email & Collaboration (Avanan).

Use this skill when working with Checkpoint Harmony Email security policies - DLP policies, anti-phishing rules, anti-malware settings, quarantine policies, allow/block lists, and policy configuration. Covers policy types, enable/disable workflows, policy effects, and policy tuning best practices. Essential for MSP administrators managing email security policies across customer tenants in Checkpoint Harmony Email & Collaboration (Avanan).

Use this skill when working with Checkpoint Harmony Email quarantine - listing, searching, releasing, deleting quarantined emails. Covers quarantine reasons, release workflows, bulk operations, and quarantine policies. Essential for MSP security analysts managing email quarantine across customer tenants in Checkpoint Harmony Email & Collaboration (Avanan).

Use this skill when working with Checkpoint Harmony Email threat detection and analysis - phishing, malware, BEC, account takeover, IOC extraction, threat timelines, and severity assessment. Covers threat types, detection engines, indicator analysis, and threat intelligence workflows. Essential for MSP security analysts investigating email-borne threats detected by Checkpoint Harmony Email & Collaboration (Avanan).