# Material Security Documentation ## Documentation - [Overview](https://docs.material.security/overview.md): Material's detection strategy holistically mitigates risk like data or reputation loss, insider threats, account takeover, and sensitive data exposure in Google Workspace and Microsoft 365. - [What's New](https://docs.material.security/whats-new.md) - [Version 1.62](https://docs.material.security/whats-new/version-1.62.md) - [Version 1.61](https://docs.material.security/whats-new/version-1.61.md) - [Previous Releases](https://docs.material.security/whats-new/previous-releases.md) - [Version 1.60](https://docs.material.security/whats-new/previous-releases/version-1.60.md) - [Version 1.59](https://docs.material.security/whats-new/previous-releases/version-1.59.md) - [Version 1.58](https://docs.material.security/whats-new/previous-releases/version-1.58.md) - [Version 1.57](https://docs.material.security/whats-new/previous-releases/version-1.57.md) - [Version 1.56](https://docs.material.security/whats-new/previous-releases/version-1.56.md) - [Version 1.55](https://docs.material.security/whats-new/previous-releases/version-1.55.md) - [Version 1.54](https://docs.material.security/whats-new/previous-releases/version-1.54.md) - [Version 1.53](https://docs.material.security/whats-new/previous-releases/version-1.53.md) - [Version 1.52](https://docs.material.security/whats-new/previous-releases/version-1.52.md) - [Version 1.51](https://docs.material.security/whats-new/previous-releases/version-1.51.md) - [Version 1.50](https://docs.material.security/whats-new/previous-releases/version-1.50.md) - [Version 1.49](https://docs.material.security/whats-new/previous-releases/version-1.49.md) - [Version 1.48](https://docs.material.security/whats-new/previous-releases/version-1.48.md) - [Version 1.47](https://docs.material.security/whats-new/previous-releases/version-1.47.md) - [Version 1.46](https://docs.material.security/whats-new/previous-releases/version-1.46.md) - [Version 1.45](https://docs.material.security/whats-new/previous-releases/version-1.45.md) - [Version 1.44](https://docs.material.security/whats-new/previous-releases/version-1.44.md) - [1.15 to 1.43](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43.md) - [Version 1.43](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.43.md) - [Version 1.42](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.42.md) - [Version 1.41](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.41.md) - [Version 1.40](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.40.md) - [Version 1.39](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.39.md) - [Version 1.38](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.38.md) - [Version 1.37](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.37.md) - [Version 1.36](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.36.md) - [Version 1.35](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.35.md) - [Version 1.34](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.34.md) - [Version 1.33](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.33.md) - [Version 1.32](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.32.md) - [Version 1.31](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.31.md) - [Version 1.30](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.30.md) - [Version 1.29](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.29.md) - [Version 1.28](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.28.md) - [Version 1.27](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.27.md) - [Unified Phishing Issue Experience](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.27/unified-phishing-issue-experience.md) - [Version 1.26](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.26.md) - [Version 1.25](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.25.md) - [Version 1.24](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.24.md) - [Version 1.23](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.23.md) - [Version 1.22](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.22.md) - [Version 1.21](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.21.md) - [Version 1.20](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.20.md) - [Version 1.19](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.19.md) - [Version 1.18](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.18.md) - [Version 1.17](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.17.md) - [Version 1.16](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.16.md) - [Version 1.15](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.15.md) - [Deployment Guides](https://docs.material.security/getting-started/deployment-guides.md) - [Your First 30 Days](https://docs.material.security/getting-started/deployment-guides/your-first-30-days.md): Essentials and Advanced - [1: Connect & Sync](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/1-connect-and-sync.md) - [2: Admin Tour](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/2-admin-tour.md) - [3: Assign Additional Roles (Optional)](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/3-assign-additional-roles-optional.md) - [4: Configure SSO (Optional)](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/4-configure-sso-optional.md) - [5: Customize](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/5-customize.md) - [6: Enable Email Remediation](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation.md) - [Configure Material Detections](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/configure-material-detections.md) - [Configure User Reporting](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/configure-user-reporting.md) - [Configure Email Provider Alerts](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/configure-email-provider-alerts.md) - [Configure Issue Triage](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/configure-issue-triage.md) - [Set up a notification](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/set-up-a-notification.md) - [Review suggested VIPs](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/add-a-vip.md) - [Configure Google Workspace security settings](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/configure-google-workspace-security-settings.md) - [Enable Email Remediation](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/enable-email-remediation.md) - [7: Review OAuth Remediation Agent](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/7-review-oauth-remediation-agent.md) - [8: Enable File Security](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/7-enable-file-security.md) - [9: Configure Account Security](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/8-configure-account-security.md) - [10: Validate](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/9-validate.md) - [File Security](https://docs.material.security/getting-started/deployment-guides/file-security.md) - [31+ Days](https://docs.material.security/getting-started/deployment-guides/31+-days.md) - [Phase 2 Email Security](https://docs.material.security/getting-started/deployment-guides/31+-days/phase-2-email-security.md) - [Build a Custom Detection](https://docs.material.security/getting-started/deployment-guides/31+-days/build-a-custom-detection.md) - [Configure VIP Impersonation & Trusted Entities](https://docs.material.security/getting-started/deployment-guides/31+-days/configure-vip-impersonation-and-trusted-entities.md) - [Deploy Account Takeover Resilience (ATOR)](https://docs.material.security/getting-started/deployment-guides/deploy-account-takeover-resilience-ator.md) - [Enable Password Reset & App Signup Protection](https://docs.material.security/getting-started/deployment-guides/deploy-account-takeover-resilience-ator/enable-identity-protection.md) - [Enable Sensitive Email Redaction](https://docs.material.security/getting-started/deployment-guides/deploy-account-takeover-resilience-ator/enable-email-redaction.md) - [End-User Verification](https://docs.material.security/getting-started/deployment-guides/deploy-account-takeover-resilience-ator/end-user-verification.md) - [Communication Templates](https://docs.material.security/getting-started/deployment-guides/communication-templates.md) - [Quick Rollout: Essentials or Advanced](https://docs.material.security/getting-started/deployment-guides/communication-templates/quick-rollout-essentials-or-advanced.md) - [Staggered Rollout: Essentials or Advanced](https://docs.material.security/getting-started/deployment-guides/communication-templates/staggered-rollout-essentials-or-advanced.md) - [Quick Rollout: Essentials or Advanced + ATO Resilience](https://docs.material.security/getting-started/deployment-guides/communication-templates/quick-rollout-essentials-or-advanced-+-ato-resilience.md) - [Staggered Rollout: Essentials or Advanced + ATO Resilience](https://docs.material.security/getting-started/deployment-guides/communication-templates/staggered-rollout-essentials-or-advanced-+-ato-resilience.md) - [Staggered Rollout: ATO Resilience](https://docs.material.security/getting-started/deployment-guides/communication-templates/staggered-rollout-ato-resilience.md) - [Trials (POC)](https://docs.material.security/getting-started/deployment-guides/communication-templates/trials-poc.md) - [Tutorials for end users](https://docs.material.security/getting-started/deployment-guides/communication-templates/tutorials-for-end-users.md) - [Deployment Wrap Up](https://docs.material.security/getting-started/deployment-guides/deployment-wrap-up.md) - [Fundamentals](https://docs.material.security/getting-started/fundamentals.md) - [Detect](https://docs.material.security/getting-started/fundamentals/detect.md) - [Custom Detections](https://docs.material.security/getting-started/fundamentals/detect/custom-detections.md) - [Detection Severity Framework](https://docs.material.security/getting-started/fundamentals/detect/detection-severity-framework.md) - [Trusted Entities](https://docs.material.security/getting-started/fundamentals/detect/trusted-entities.md) - [Investigate](https://docs.material.security/getting-started/fundamentals/investigate.md) - [Assign Issues](https://docs.material.security/getting-started/fundamentals/investigate/assign-issues.md) - [Evidence](https://docs.material.security/getting-started/fundamentals/investigate/evidence.md) - [Message Analysis](https://docs.material.security/getting-started/fundamentals/investigate/evidence/message-analysis.md) - [Issue Closure and Manual Classification](https://docs.material.security/getting-started/fundamentals/investigate/issue-closure-and-manual-classification.md) - [Saved Views](https://docs.material.security/getting-started/fundamentals/investigate/saved-views.md) - [Respond](https://docs.material.security/getting-started/fundamentals/respond.md) - [Configure Default Responses](https://docs.material.security/getting-started/fundamentals/respond/configure-default-responses.md) - [Respond to an Issue Manually](https://docs.material.security/getting-started/fundamentals/respond/respond-to-an-issue-manually.md) - [Explore](https://docs.material.security/getting-started/fundamentals/explore.md) - [File Search](https://docs.material.security/getting-started/fundamentals/explore/file-search.md) - [Message Search](https://docs.material.security/getting-started/fundamentals/explore/message-search.md) - [Re-sync a group](https://docs.material.security/getting-started/fundamentals/explore/re-sync-a-group.md) - [Export a .CSV in the Explorer](https://docs.material.security/getting-started/fundamentals/explore/export-a-.csv-in-the-explorer.md) - [Account Takeover Resilience](https://docs.material.security/getting-started/fundamentals/account-takeover-resilience.md) - [Export](https://docs.material.security/getting-started/fundamentals/export.md) - [Risk Areas](https://docs.material.security/learn-more/risk-areas.md) - [Email Threats](https://docs.material.security/learn-more/risk-areas/email-threats.md) - [Detect](https://docs.material.security/learn-more/risk-areas/email-threats/detect.md) - [Material Email Threat Detections](https://docs.material.security/learn-more/risk-areas/email-threats/detect/material-email-threat-detections.md) - [Email Bomb Protection](https://docs.material.security/learn-more/risk-areas/email-threats/detect/material-email-threat-detections/email-bomb-protection.md) - [Calendar Invite Attacks](https://docs.material.security/learn-more/risk-areas/email-threats/detect/material-email-threat-detections/calendar-invite-attacks.md) - [User Reporting Methods](https://docs.material.security/learn-more/risk-areas/email-threats/detect/user-reporting-methods.md) - [VIP Impersonation](https://docs.material.security/learn-more/risk-areas/email-threats/detect/vip-impersonation.md) - [Issue Exemptions](https://docs.material.security/learn-more/risk-areas/email-threats/detect/issue-exemptions.md) - [Custom Detections (Email Threats)](https://docs.material.security/learn-more/risk-areas/email-threats/detect/custom-detections-email-threats.md) - [Email Provider Alerts](https://docs.material.security/learn-more/risk-areas/email-threats/detect/email-provider-alerts.md) - [Investigate](https://docs.material.security/learn-more/risk-areas/email-threats/investigate.md) - [Email Threat Issue Search](https://docs.material.security/learn-more/risk-areas/email-threats/investigate/email-threat-issue-search.md) - [Issue Details](https://docs.material.security/learn-more/risk-areas/email-threats/investigate/issue-details.md) - [Detected and similar messages](https://docs.material.security/learn-more/risk-areas/email-threats/investigate/issue-details/detected-and-similar-messages.md) - [Response and Remediation](https://docs.material.security/learn-more/risk-areas/email-threats/investigate/issue-details/response-and-remediation.md) - [Blocked attachments outside an active issue](https://docs.material.security/learn-more/risk-areas/email-threats/investigate/issue-details/blocked-attachments.md) - [Exempt Messages](https://docs.material.security/learn-more/risk-areas/email-threats/investigate/exempt-messages.md) - [Auto-Respond](https://docs.material.security/learn-more/risk-areas/email-threats/auto-respond.md) - [Banner, custom message, and template best practices](https://docs.material.security/learn-more/risk-areas/email-threats/auto-respond/banner-custom-message-and-template-best-practices.md) - [User Report Auto Classification](https://docs.material.security/learn-more/risk-areas/email-threats/auto-respond/user-report-auto-classification.md) - [Email Threats Reports](https://docs.material.security/learn-more/risk-areas/email-threats/reports.md): Use reports to inform your strategy - [Simulations](https://docs.material.security/learn-more/risk-areas/email-threats/simulations.md) - [Third-party simulation tools](https://docs.material.security/learn-more/risk-areas/email-threats/third-party-simulation-tools.md) - [Get Support](https://docs.material.security/learn-more/risk-areas/email-threats/support-settings.md) - [Email Data Security](https://docs.material.security/learn-more/risk-areas/email-data-security.md) - [Sensitive Categories](https://docs.material.security/learn-more/risk-areas/email-data-security/sensitive-categories.md) - [Grace Periods](https://docs.material.security/learn-more/risk-areas/email-data-security/grace-periods.md) - [File Data Security](https://docs.material.security/learn-more/risk-areas/file-data-security.md) - [Bulk remediate and revoke access to files](https://docs.material.security/learn-more/risk-areas/file-data-security/bulk-remediate-and-revoke-access-to-files.md) - [Malicious OAuth Apps](https://docs.material.security/learn-more/risk-areas/malicious-oauth-apps.md) - [OAuth Detections and Classification](https://docs.material.security/learn-more/risk-areas/malicious-oauth-apps/oauth-detections-and-classification.md) - [OAuth Response](https://docs.material.security/learn-more/risk-areas/malicious-oauth-apps/oauth-remediation-responses.md) - [OAuth FAQ](https://docs.material.security/learn-more/risk-areas/malicious-oauth-apps/oauth-faq.md) - [Password Reset Protection](https://docs.material.security/learn-more/risk-areas/password-reset-protection.md) - [Unlock Messages for End Users](https://docs.material.security/learn-more/risk-areas/password-reset-protection/unlock-messages-for-end-users.md) - [Administration](https://docs.material.security/learn-more/administration.md) - [Settings Hierarchy](https://docs.material.security/learn-more/administration/settings-hierarchy.md) - [Mailbox Mirroring](https://docs.material.security/learn-more/administration/mailbox-mirroring.md) - [Admin Roles](https://docs.material.security/learn-more/administration/admin-roles.md) - [Role Descriptions](https://docs.material.security/learn-more/administration/admin-roles/role-descriptions.md) - [How to Assign Roles](https://docs.material.security/learn-more/administration/admin-roles/how-to-assign-roles.md) - [Permissions Matrices](https://docs.material.security/learn-more/administration/admin-roles/permissions-matrices.md) - [Admin Role FAQ](https://docs.material.security/learn-more/administration/admin-roles/admin-role-faq.md) - [Group and Account Customization](https://docs.material.security/learn-more/administration/group-and-account-customization.md) - [Security](https://docs.material.security/learn-more/administration/security.md) - [OpenAI](https://docs.material.security/learn-more/administration/security/openai.md) - [Admin SSO](https://docs.material.security/learn-more/administration/security/admin-sso.md) - [Web Application Firewall](https://docs.material.security/learn-more/administration/security/web-application-firewall.md) - [Off-board Users](https://docs.material.security/learn-more/administration/off-board-users.md) - [Audit Log](https://docs.material.security/learn-more/administration/audit-log.md) - [Audit Log Updates (Version 1.39)](https://docs.material.security/learn-more/administration/audit-log/audit-log-updates-version-1.39.md) - [Retention Settings](https://docs.material.security/learn-more/retention-settings.md) - [Integration Fundamentals](https://docs.material.security/integrations/integration-fundamentals.md) - [Identity Integrations](https://docs.material.security/integrations/integration-fundamentals/identity-integrations.md) - [Okta](https://docs.material.security/integrations/integration-fundamentals/identity-integrations/okta.md) - [Okta SSF](https://docs.material.security/integrations/integration-fundamentals/identity-integrations/okta-ssf.md) - [Messaging and Ticketing Integrations](https://docs.material.security/integrations/integration-fundamentals/messaging-and-ticketing-integrations.md) - [Email Notifications](https://docs.material.security/integrations/integration-fundamentals/messaging-and-ticketing-integrations/email-notifications.md) - [SIEM Integrations](https://docs.material.security/integrations/integration-fundamentals/siem-integrations.md) - [CrowdStrike NG-SIEM](https://docs.material.security/integrations/integration-fundamentals/siem-integrations/crowdstrike-ng-siem.md) - [Panther](https://docs.material.security/integrations/integration-fundamentals/siem-integrations/panther.md) - [SOAR Integrations](https://docs.material.security/integrations/integration-fundamentals/soar-integrations.md) - [Custom Webhooks](https://docs.material.security/integrations/integration-fundamentals/custom-webhooks.md) ## Developers - [API v1](https://docs.material.security/reference/api-v1.md) - [Authentication](https://docs.material.security/reference/api-v1/authentication.md) - [Hello World](https://docs.material.security/reference/api-v1/hello-world.md) - [Errors and Troubleshooting](https://docs.material.security/reference/api-v1/errors-and-troubleshooting.md) - [Accounts](https://docs.material.security/reference/api-v1/accounts.md) - [Groups](https://docs.material.security/reference/api-v1/groups.md) - [Issues](https://docs.material.security/reference/api-v1/issues.md) - [Messages](https://docs.material.security/reference/api-v1/messages.md) - [OAuth Apps](https://docs.material.security/reference/api-v1/oauth-apps.md) - [Roles](https://docs.material.security/reference/api-v1/roles.md) - [Trusted Entities](https://docs.material.security/reference/api-v1/trusted-entities.md) - [Material MCP Server](https://docs.material.security/reference/material-mcp-server.md) - [Beta API & Event Descriptions](https://docs.material.security/reference/beta-api-and-event-descriptions.md) - [Case Event Migration (version 1.51)](https://docs.material.security/reference/case-event-migration-version-1.51.md) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on a page URL with the `ask` query parameter: ``` GET https://docs.material.security/overview.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.