Evidence Console
Email Investigation Panel
Try:
help, inbox, open 2, sender 2, headers 2, url 2, verdict phishingBlue Team Room
Review an inbox sample, inspect the suspicious message, analyze the sender, headers, and URL, then decide whether the email should be escalated as phishing.
Evidence Console
help, inbox, open 2, sender 2, headers 2, url 2, verdict phishingObjectives