In this section, we will analyze emails to gather information relevant to our investigation, as emails are often a key source of evidence and provide valuable insight into potential security threats.

Navigating to Email Security

To begin the email analysis, navigate to the Email Security tab. This section provides tools and features for examining emails in detail.

• Click on the email security tab.
• Use the search bar to find the email related to the investigation.

Using Detailed Search

Use the detailed search bar in the Email Security tab to find the specific email related to the investigation. Fill in the following fields as needed:

• Sender
• Recipient
• Subject
• Sender IP Address
• Attachment Name
• Email Body
• Date
• Action

Examining Email Content

Once you've found the email in question, examine it to find the answers to the last two questions in the first step of the playbook.

• Is the content of the email suspicious?
• Are there any attachments?