Catcher

Overview

Case Detail

INC-20260511-0010

Updated employee handbook attached

unknowncriticalanalysis_failed

Triage

Risk
93.4%
Confidence
low
Action
manual_review
Status
analysis_failed
  • Attachment masquerade detected
  • DMARC failed
  • PDF JavaScript flag present

Message

From
HR Shared Drive <hr-docs@sharepoint-files.example>
Sender domain
sharepoint-files.example
Reporter
nora.hr@example.test
Reply-To
hr-support@example.net
Return-Path
bounce@sharepoint-files.example
Message ID
<m365-report-0010@example.test>

Signals

SPF
softfail
DKIM
none
DMARC
fail
Clickable URLs
2
Shorteners
0
Attachments
2
Attachment reputation
malicious
Stego reviews
1
QR decoded
-
Containers
-
Lure theme
-
Platforms
-
Objectives
-
URL enrichment
-
Domain enrichment
-
Redirects
-
Final mismatch
-
Browser forms
-/-
Threat intel
-
Intel matches
-

Pipeline

Tenant
tenant-dev
Evidence ID
EVID-20260511-0010
Queue job
45
Run ID
20260511_123900_0000_EVID-20260511-0010
Closed by
-
Close reason
-
Closure note
-

Last error: LLM endpoint timeout after deterministic scoring; manual review required.