# Material Security Documentation

## Documentation

- [Material Security Documentation](https://docs.material.security/material-security-documentation.md)
- [What's New](https://docs.material.security/whats-new.md)
- [Version 1.64](https://docs.material.security/whats-new/version-1.64.md)
- [Version 1.63](https://docs.material.security/whats-new/version-1.63.md)
- [Previous Releases](https://docs.material.security/whats-new/previous-releases.md)
- [Version 1.62](https://docs.material.security/whats-new/previous-releases/version-1.62.md)
- [Version 1.61](https://docs.material.security/whats-new/previous-releases/version-1.61.md)
- [Version 1.60](https://docs.material.security/whats-new/previous-releases/version-1.60.md)
- [Version 1.59](https://docs.material.security/whats-new/previous-releases/version-1.59.md)
- [Version 1.58](https://docs.material.security/whats-new/previous-releases/version-1.58.md)
- [Version 1.57](https://docs.material.security/whats-new/previous-releases/version-1.57.md)
- [Version 1.56](https://docs.material.security/whats-new/previous-releases/version-1.56.md)
- [Version 1.55](https://docs.material.security/whats-new/previous-releases/version-1.55.md)
- [Version 1.54](https://docs.material.security/whats-new/previous-releases/version-1.54.md)
- [Version 1.53](https://docs.material.security/whats-new/previous-releases/version-1.53.md)
- [Version 1.52](https://docs.material.security/whats-new/previous-releases/version-1.52.md)
- [Version 1.51](https://docs.material.security/whats-new/previous-releases/version-1.51.md)
- [Version 1.50](https://docs.material.security/whats-new/previous-releases/version-1.50.md)
- [Version 1.49](https://docs.material.security/whats-new/previous-releases/version-1.49.md)
- [Version 1.48](https://docs.material.security/whats-new/previous-releases/version-1.48.md)
- [Version 1.47](https://docs.material.security/whats-new/previous-releases/version-1.47.md)
- [Version 1.46](https://docs.material.security/whats-new/previous-releases/version-1.46.md)
- [Version 1.45](https://docs.material.security/whats-new/previous-releases/version-1.45.md)
- [Version 1.44](https://docs.material.security/whats-new/previous-releases/version-1.44.md)
- [1.15 to 1.43](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43.md)
- [Version 1.43](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.43.md)
- [Version 1.42](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.42.md)
- [Version 1.41](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.41.md)
- [Version 1.40](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.40.md)
- [Version 1.39](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.39.md)
- [Version 1.38](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.38.md)
- [Version 1.37](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.37.md)
- [Version 1.36](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.36.md)
- [Version 1.35](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.35.md)
- [Version 1.34](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.34.md)
- [Version 1.33](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.33.md)
- [Version 1.32](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.32.md)
- [Version 1.31](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.31.md)
- [Version 1.30](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.30.md)
- [Version 1.29](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.29.md)
- [Version 1.28](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.28.md)
- [Version 1.27](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.27.md)
- [Unified Phishing Issue Experience](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.27/unified-phishing-issue-experience.md)
- [Version 1.26](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.26.md)
- [Version 1.25](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.25.md)
- [Version 1.24](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.24.md)
- [Version 1.23](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.23.md)
- [Version 1.22](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.22.md)
- [Version 1.21](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.21.md)
- [Version 1.20](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.20.md)
- [Version 1.19](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.19.md)
- [Version 1.18](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.18.md)
- [Version 1.17](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.17.md)
- [Version 1.16](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.16.md)
- [Version 1.15](https://docs.material.security/whats-new/previous-releases/1.15-to-1.43/version-1.15.md)
- [Introducing Material's Updated Navigation](https://docs.material.security/introducing-materials-updated-navigation.md)
- [Deployment Guides](https://docs.material.security/getting-started/deployment-guides.md)
- [Your First 30 Days](https://docs.material.security/getting-started/deployment-guides/your-first-30-days.md): Essentials and Advanced
- [1: Connect & Sync](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/1-connect-and-sync.md)
- [2: Admin Tour](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/2-admin-tour.md)
- [3: Assign Additional Roles (Optional)](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/3-assign-additional-roles-optional.md)
- [4: Configure SSO (Optional)](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/4-configure-sso-optional.md)
- [5: Customize](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/5-customize.md)
- [6: Enable Email Remediation](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation.md)
- [Configure Material Detections](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/configure-material-detections.md)
- [Configure User Reporting](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/configure-user-reporting.md)
- [Configure Email Provider Alerts](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/configure-email-provider-alerts.md)
- [Configure Issue Triage](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/configure-issue-triage.md)
- [Set up a notification](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/set-up-a-notification.md)
- [Review suggested VIPs](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/add-a-vip.md)
- [Configure Google Workspace security settings](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/configure-google-workspace-security-settings.md)
- [Enable Email Remediation](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/6-enable-email-remediation/enable-email-remediation.md)
- [7: Review OAuth Remediation Agent](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/7-review-oauth-remediation-agent.md)
- [8: Enable Google Drive Security](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/7-enable-file-security.md)
- [9: Configure Account Security](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/8-configure-account-security.md)
- [10: Validate](https://docs.material.security/getting-started/deployment-guides/your-first-30-days/9-validate.md)
- [File Security](https://docs.material.security/getting-started/deployment-guides/file-security.md)
- [31+ Days](https://docs.material.security/getting-started/deployment-guides/31+-days.md)
- [Phase 2 Email Security](https://docs.material.security/getting-started/deployment-guides/31+-days/phase-2-email-security.md)
- [Build a Custom Detection](https://docs.material.security/getting-started/deployment-guides/31+-days/build-a-custom-detection.md)
- [Configure VIP Impersonation & Trusted Entities](https://docs.material.security/getting-started/deployment-guides/31+-days/configure-vip-impersonation-and-trusted-entities.md)
- [Deploy Account Takeover Resilience (ATOR)](https://docs.material.security/getting-started/deployment-guides/deploy-account-takeover-resilience-ator.md)
- [Enable Email Identity Protection](https://docs.material.security/getting-started/deployment-guides/deploy-account-takeover-resilience-ator/enable-identity-protection.md)
- [Enable Sensitive Email Redaction](https://docs.material.security/getting-started/deployment-guides/deploy-account-takeover-resilience-ator/enable-email-redaction.md)
- [End-User Verification](https://docs.material.security/getting-started/deployment-guides/deploy-account-takeover-resilience-ator/end-user-verification.md)
- [Account Takeover Resilience](https://docs.material.security/getting-started/deployment-guides/account-takeover-resilience.md)
- [Communication Templates](https://docs.material.security/getting-started/deployment-guides/communication-templates.md)
- [Quick Rollout: Essentials or Advanced](https://docs.material.security/getting-started/deployment-guides/communication-templates/quick-rollout-essentials-or-advanced.md)
- [Staggered Rollout: Essentials or Advanced](https://docs.material.security/getting-started/deployment-guides/communication-templates/staggered-rollout-essentials-or-advanced.md)
- [Quick Rollout: Essentials or Advanced + ATO Resilience](https://docs.material.security/getting-started/deployment-guides/communication-templates/quick-rollout-essentials-or-advanced-+-ato-resilience.md)
- [Staggered Rollout: Essentials or Advanced + ATO Resilience](https://docs.material.security/getting-started/deployment-guides/communication-templates/staggered-rollout-essentials-or-advanced-+-ato-resilience.md)
- [Staggered Rollout: ATO Resilience](https://docs.material.security/getting-started/deployment-guides/communication-templates/staggered-rollout-ato-resilience.md)
- [Trials (POC)](https://docs.material.security/getting-started/deployment-guides/communication-templates/trials-poc.md)
- [Tutorials for end users](https://docs.material.security/getting-started/deployment-guides/communication-templates/tutorials-for-end-users.md)
- [Deployment Wrap Up](https://docs.material.security/getting-started/deployment-guides/deployment-wrap-up.md)
- [Investigate](https://docs.material.security/working-with-issues/investigate.md)
- [Evidence](https://docs.material.security/working-with-issues/investigate/evidence.md)
- [Message Analysis](https://docs.material.security/working-with-issues/investigate/evidence/message-analysis.md)
- [Assign Issues](https://docs.material.security/working-with-issues/investigate/assign-issues.md)
- [Issue Closure and Manual Classification](https://docs.material.security/working-with-issues/investigate/issue-closure-and-manual-classification.md)
- [Save an Issue List View](https://docs.material.security/working-with-issues/investigate/saved-views.md)
- [Respond](https://docs.material.security/working-with-issues/respond.md)
- [Configure Default Auto-Responses](https://docs.material.security/working-with-issues/respond/configure-default-responses.md)
- [Respond to an Issue Manually](https://docs.material.security/working-with-issues/respond/respond-to-an-issue-manually.md)
- [Explore & Search](https://docs.material.security/working-with-issues/explorer.md)
- [File Search](https://docs.material.security/working-with-issues/explorer/file-search.md)
- [Re-sync a group](https://docs.material.security/working-with-issues/explorer/re-sync-a-group.md)
- [Export a .CSV in the Explorer](https://docs.material.security/working-with-issues/explorer/export-a-.csv-in-the-explorer.md)
- [Email Threats](https://docs.material.security/email-protections/email-threats.md)
- [Issues](https://docs.material.security/email-protections/email-threats/issues.md)
- [Email Threat Issue Search](https://docs.material.security/email-protections/email-threats/issues/email-threat-issue-search.md)
- [Issue Details](https://docs.material.security/email-protections/email-threats/issues/issue-details.md)
- [Detected and similar messages](https://docs.material.security/email-protections/email-threats/issues/issue-details/detected-and-similar-messages.md)
- [Response and Remediation](https://docs.material.security/email-protections/email-threats/issues/issue-details/response-and-remediation.md)
- [Blocked attachments outside an active issue](https://docs.material.security/email-protections/email-threats/issues/issue-details/blocked-attachments.md)
- [Exempt Messages](https://docs.material.security/email-protections/email-threats/issues/exempt-messages.md)
- [Share Feedback on Email Threats](https://docs.material.security/email-protections/email-threats/issues/share-feedback-on-email-threats.md)
- [Detections](https://docs.material.security/email-protections/email-threats/detections.md)
- [Material Email Threat Detections](https://docs.material.security/email-protections/email-threats/detections/material-email-threat-detections.md)
- [Calendar Invite Attacks](https://docs.material.security/email-protections/email-threats/detections/material-email-threat-detections/calendar-invite-attacks.md)
- [VIP Impersonation](https://docs.material.security/email-protections/email-threats/detections/vip-impersonation.md)
- [Issue Exemptions](https://docs.material.security/email-protections/email-threats/detections/issue-exemptions.md)
- [Custom Detections (Email Threats)](https://docs.material.security/email-protections/email-threats/detections/custom-detections-email-threats.md)
- [Report](https://docs.material.security/email-protections/email-threats/report.md): Use reports to inform your strategy
- [Settings](https://docs.material.security/email-protections/email-threats/settings.md)
- [Email Provider Alerts](https://docs.material.security/email-protections/email-threats/settings/email-provider-alerts.md)
- [Banner, custom message, and template best practices](https://docs.material.security/email-protections/email-threats/settings/banner-custom-message-and-template-best-practices.md)
- [User Reports](https://docs.material.security/email-protections/user-reports.md)
- [User Reporting Methods](https://docs.material.security/email-protections/user-reports/user-reporting-methods.md)
- [User Report Auto Classification](https://docs.material.security/email-protections/user-reports/user-report-auto-classification.md)
- [Email Bomb Attacks](https://docs.material.security/email-protections/email-bomb-attacks.md)
- [Email Redaction](https://docs.material.security/email-protections/email-redaction.md)
- [Grace Periods](https://docs.material.security/email-protections/email-redaction/grace-periods.md)
- [Email Identity Protection](https://docs.material.security/email-protections/email-identity-protection.md)
- [Unlock Messages for End Users](https://docs.material.security/email-protections/email-identity-protection/unlock-messages-for-end-users.md)
- [Simulations](https://docs.material.security/email-protections/simulations.md)
- [Third-party simulation tools](https://docs.material.security/email-protections/simulations/third-party-simulation-tools.md)
- [Google Drive Security](https://docs.material.security/workspace-protections/google-drive-security.md)
- [Bulk remediate and revoke access to files](https://docs.material.security/workspace-protections/google-drive-security/bulk-remediate-and-revoke-access-to-files.md)
- [Google Workspace sharing policies](https://docs.material.security/workspace-protections/google-drive-security/google-workspace-sharing-policies.md): See how Material uses your Google Workspace sharing policies to detect truly public files.
- [OAuth Security](https://docs.material.security/workspace-protections/oauth-security.md)
- [OAuth Detections and Classification](https://docs.material.security/workspace-protections/oauth-security/oauth-detections-and-classification.md)
- [OAuth Response](https://docs.material.security/workspace-protections/oauth-security/oauth-remediation-responses.md)
- [OAuth FAQ](https://docs.material.security/workspace-protections/oauth-security/oauth-faq.md)
- [Detections Overview](https://docs.material.security/detections/detections-overview.md)
- [Custom Detections](https://docs.material.security/detections/detections-overview/custom-detections.md)
- [Detection Severity Framework](https://docs.material.security/detections/detections-overview/detection-severity-framework.md)
- [Sensitive Categories](https://docs.material.security/detections/sensitive-categories.md)
- [Trusted Entities](https://docs.material.security/detections/trusted-entities.md)
- [Admin Roles](https://docs.material.security/administration/admin-roles.md)
- [Role Descriptions](https://docs.material.security/administration/admin-roles/role-descriptions.md)
- [How to Assign Roles](https://docs.material.security/administration/admin-roles/how-to-assign-roles.md)
- [Permissions Matrices](https://docs.material.security/administration/admin-roles/permissions-matrices.md)
- [Admin Role FAQ](https://docs.material.security/administration/admin-roles/admin-role-faq.md)
- [Audit Log](https://docs.material.security/administration/audit-log.md)
- [Audit Log Updates (Version 1.39)](https://docs.material.security/administration/audit-log/audit-log-updates-version-1.39.md)
- [Group and Account Customization](https://docs.material.security/administration/group-and-account-customization.md)
- [Mailbox Mirroring](https://docs.material.security/administration/mailbox-mirroring.md)
- [Manage Licenses](https://docs.material.security/administration/manage-licenses.md)
- [Off-board Users](https://docs.material.security/administration/off-board-users.md)
- [Retention Settings](https://docs.material.security/administration/retention-settings.md)
- [Security](https://docs.material.security/administration/security.md)
- [OpenAI](https://docs.material.security/administration/security/openai.md)
- [Admin SSO](https://docs.material.security/administration/security/admin-sso.md)
- [Web Application Firewall](https://docs.material.security/administration/security/web-application-firewall.md)
- [Settings Hierarchy](https://docs.material.security/administration/settings-hierarchy.md)
- [Integration Fundamentals](https://docs.material.security/integrations/integration-fundamentals.md)
- [Identity Integrations](https://docs.material.security/integrations/integration-fundamentals/identity-integrations.md)
- [Okta SSF](https://docs.material.security/integrations/integration-fundamentals/identity-integrations/okta-ssf.md)
- [Messaging and Ticketing Integrations](https://docs.material.security/integrations/integration-fundamentals/messaging-and-ticketing-integrations.md)
- [Email Notifications](https://docs.material.security/integrations/integration-fundamentals/messaging-and-ticketing-integrations/email-notifications.md)
- [SIEM Integrations](https://docs.material.security/integrations/integration-fundamentals/siem-integrations.md)
- [CrowdStrike NG-SIEM](https://docs.material.security/integrations/integration-fundamentals/siem-integrations/crowdstrike-ng-siem.md)
- [Panther](https://docs.material.security/integrations/integration-fundamentals/siem-integrations/panther.md)
- [SOAR Integrations](https://docs.material.security/integrations/integration-fundamentals/soar-integrations.md)
- [Custom Webhooks](https://docs.material.security/integrations/integration-fundamentals/custom-webhooks.md)
- [Export](https://docs.material.security/integrations/integration-fundamentals/export.md)

## Developers

- [API v1](https://docs.material.security/reference/api-v1.md)
- [Authentication](https://docs.material.security/reference/api-v1/authentication.md)
- [Hello World](https://docs.material.security/reference/api-v1/hello-world.md)
- [Errors and Troubleshooting](https://docs.material.security/reference/api-v1/errors-and-troubleshooting.md)
- [Accounts](https://docs.material.security/reference/api-v1/accounts.md)
- [Groups](https://docs.material.security/reference/api-v1/groups.md)
- [Issues](https://docs.material.security/reference/api-v1/issues.md)
- [Messages](https://docs.material.security/reference/api-v1/messages.md)
- [OAuth Apps](https://docs.material.security/reference/api-v1/oauth-apps.md)
- [Roles](https://docs.material.security/reference/api-v1/roles.md)
- [Trusted Entities](https://docs.material.security/reference/api-v1/trusted-entities.md)
- [Material MCP Server](https://docs.material.security/reference/material-mcp-server.md)
- [Beta API & Event Descriptions](https://docs.material.security/reference/beta-api-and-event-descriptions.md)
- [Case Event Migration (version 1.51)](https://docs.material.security/reference/case-event-migration-version-1.51.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
This site has an agentic ask interface you may use to query the documentation dynamically by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.material.security/index.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.