Simple report, but will show the ticket ID(s) for a given filename of a ticket comment attachment

Could also be used to auto delete malicious items. E.g. infection.zip emails come in, automatically delete the ticket.

***************************************************************************************

SELECT HD_ATTACHMENT.FILE_NAME,
HDT.ID as TICKET_ID

FROM `ORG1`.`HD_ATTACHMENT`

JOIN HD_TICKET_CHANGE HDTC ON (HDTC.ID = HD_ATTACHMENT.HD_TICKET_CHANGE_ID)
JOIN HD_TICKET HDT ON (HDT.ID = HDTC.HD_TICKET_ID)

WHERE FILE_NAME LIKE '%FILENAME%';