phantomcyber · grokas-splunk · Dec 5, 2025 · Nov 25, 2025 · Nov 25, 2025 · Nov 26, 2025
diff --git a/pyproject.toml b/pyproject.toml
@@ -51,6 +51,11 @@ Homepage = "https://github.com/phantomcyber/splunk-soar-sdk"
 Documentation = "https://github.com/phantomcyber/splunk-soar-sdk"
 Repository = "https://github.com/phantomcyber/splunk-soar-sdk"
 
+[project.optional-dependencies]
+email = [
+    "python-magic>=0.4.27",
+]
+
 [project.scripts]
 soarapps = "soar_sdk.cli.cli:main"
 

diff --git a/src/soar_sdk/extras/__init__.py b/src/soar_sdk/extras/__init__.py
diff --git a/src/soar_sdk/extras/email/__init__.py b/src/soar_sdk/extras/email/__init__.py
@@ -0,0 +1,9 @@
+from soar_sdk.extras.email.processor import EmailProcessor, ProcessEmailContext
+from soar_sdk.extras.email.rfc5322 import RFC5322EmailData, extract_rfc5322_email_data
+
+__all__ = [
+    "EmailProcessor",
+    "ProcessEmailContext",
+    "RFC5322EmailData",
+    "extract_rfc5322_email_data",
+]