EMAILS TAB OVERVIEW
EMAILS TAB OVERVIEW
Embedded Files
LETS INVESTIGATE SOME EMAILS
LETS INVESTIGATE SOME EMAILS
This page will walk you through all of the functionality within the Emails Tab. For specific guides please see the "I Want To..." section.
NOTE: There are two sub-tabs within Emails tab. Email Messages, and Advanced Email Search.
Email Messages: Will display all emails found to contain risk, or have an attachment.
Advanced Search Email: Will perform a real time search of ALL Emails. This can be an incredibly time consuming process if parameters are not specific.
Email Messages Tab
Email Messages Tab
SEARCHING: By default all emails that contain risk, or have an attachment will be shown in the results box. Specific searches can be carried out by a number of different search criteria.
Subject: Search by the subject of the email.
Attachment Name: Search by the name of an attachment emails contain.
Content: Search by content found within the body of the email.
Sender: Search by a specific sender.
Recipient: Search by a specific recipient.
MailBox: Search by a specific mailbox (All sent and recieved)
Domain: Search for all emails by a specific domain.
Organizational Unit: Search for all emails by users within a specific organizational unit.
SHOW MALICIOUS MESSAGES:
Clicking the Show Malicious Messages button will filter for messages containing malware and phishing urls.
FILTER:
Selecting the filter button on the right side of the window will allow you to narrow search results even further. There are many filters to apply.
Email Date: A date range to apply to your filter.
Quarantine Status: Search for only emails by their quarantine status.
Messages Sent: The direction of emails being sent. To/From outside domains, or internal.
Risky Messages: Filter by risky messages (all), risky message body, or risky attachments.
Malicious Messages: Filter by messages containing malware or threat urls.
Email Attachments: Filter by messages that do/dont contain an attachment.
Trashed Messages: Filter by messages currently in the trash folder.
Attachment Size: Filter by the size of attachments contained in an email.
ICONS:
You will find icons next to each email containing risk.
Phishing Icon: The phishing icon will indicate that a message contains a known phishing URL.
Risk Icon: Messages containing PCI and PII risks will be displayed with the risky icon.
ATTACHMENTS:
The attachments column will display the number of attachments for each email message. Selecting the link will allow you to see more detailed information on the attachments.
Attachment Size:
The Attachment Size will display the total size of attachments related to the email.
Sender:
The Sender column will display whoever sent the email.
RECIPIENT AND MAILBOX:
Recipient: Will show the total number of recipients, as well as displaying a globe icon if there are recipients outside of your domain.
Mailbox: Will display the total number of mailboxes in your environment that contain the email.
EMAIL SENT ON:
The email sent on column will display the date and time of the email that was sent / received.
ACTIONS:
Once you have identified the email of your choice, you will have a few options for how to deal with it.
Quarantine: Quarantining an email will send it to the users trash folder. Quarantining an email is usually done to give you some time to decide how to resolve the issue.
Download: Downloading an email will allow you to see the entire body of the email for further investigation.
Delete: Deleting the email will permanently delete the email from the users mailbox.
SHOW MALICIOUS MESSAGES BUTTON:
The show malicious messages button will put two filters in place automatically, one for phishing emails, and another for emails that contain malware. This is a great way for you to sort for potentially threatening messages easily.
Advanced Search email tab
Advanced Search email tab
Advanced Email search is a very powerful tool that will allow you to search every email within your organization. Searches performed here are real time and can be very time intensive if not properly performed. When using this search use as many search parameters as possible.
SEARCH:
Search through all emails within your environment. Fill out as many parameters as possible when performing this search.
SEARCH PARAMETERS:
Start by Clicking the down arrow in the search box to apply parameters.
SELECT PARAMETERS:
Select as many parameters as possible that are relevant to your search, this will help ensure that search times are minimal.
RESULTS:
Results will be displayed below the search box.
ACTIONS:
Once you have identified the email of your choice, you will have an option.
Delete: Deleting the email will permanently delete the email from the users mailbox.
Report abuse