Triage
- Risk
- 93.4%
- Confidence
- low
- Action
- manual_review
- Status
- analysis_failed
- Attachment masquerade detected
- DMARC failed
- PDF JavaScript flag present
Message
- From
- HR Shared Drive <hr-docs@sharepoint-files.example>
- Sender domain
- sharepoint-files.example
- Reporter
- nora.hr@example.test
- Reply-To
- hr-support@example.net
- Return-Path
- bounce@sharepoint-files.example
- Message ID
- <m365-report-0010@example.test>
Signals
- SPF
- softfail
- DKIM
- none
- DMARC
- fail
- Clickable URLs
- 2
- Shorteners
- 0
- Attachments
- 2
- Attachment reputation
- malicious
- Stego reviews
- 1
- QR decoded
- -
- Containers
- -
- Lure theme
- -
- Platforms
- -
- Objectives
- -
- URL enrichment
- -
- Domain enrichment
- -
- Redirects
- -
- Final mismatch
- -
- Browser forms
- -/-
- Threat intel
- -
- Intel matches
- -
Pipeline
- Tenant
- tenant-dev
- Evidence ID
- EVID-20260511-0010
- Queue job
- 45
- Run ID
- 20260511_123900_0000_EVID-20260511-0010
- Closed by
- -
- Close reason
- -
- Closure note
- -
Last error: LLM endpoint timeout after deterministic scoring; manual review required.