Demo data mode: synthetic Catcher cases and notification events are being displayed.
Case Detail
INC-20260511-0011
Shared voicemail transcription
Triage
- Verdict
- pending
- Severity
- low
- Risk
- -
- Confidence
- pending
- Action
- pending_analysis
- Status
- queued_for_analysis
No analysis reasons are available yet.
AI Summary
No AI-generated summary is available for this case yet.
Manual Triage Summary
No manual triage summary has been saved yet.
Action Broker
Governed action state shown for analyst review before mutation approval.
- Action path
- securityfabric.action-broker -> catcher.analysis/start
- Approval tier
- none
- Execution mode
- dry_run
- Dispatch status
- pending
- Blocked reason
- -
- Result
- awaiting_case_enrichment
Dry-run vs mutation mode is controlled by dry_run and policy approval tier.
Closure evidence: queue_job_id: 46
Callback request/action IDs: tenant-dev/CORR-INC-20260511-0011/ABR-20260511-0011
Callback publish/ingest: pending / pending
Message
- From
- Voice Mail <voicemail@pbx.example>
- Sender domain
- pbx.example
- Reporter
- devon.it@example.test
- Reply-To
- no-reply@pbx.example
- Return-Path
- bounce@pbx.example
- Message ID
- <m365-report-0011@example.test>
Signals
- SPF
- -
- DKIM
- -
- DMARC
- -
- Clickable URLs
- 0
- Shorteners
- 0
- Attachments
- 1
- Attachment reputation
- pending
- Stego reviews
- 0
- QR decoded
- -
- Containers
- -
- Lure theme
- -
- Platforms
- -
- Objectives
- -
- URL enrichment
- -
- Domain enrichment
- -
- Redirects
- -
- Final mismatch
- -
- Browser forms
- -/-
- Threat intel
- -
- Intel matches
- -
URL Enrichment
- Status
- -
- Attempted
- -
- Redirected
- -
- Max hops
- -
- Shorteners expanded
- -
- Blocked/errors
- -/-
No URL trace items are available.
Browser Metadata
- Items
- -
- Password / OTP
- -/-
- CAPTCHA/checks
- -
- Brand mismatch
- -
- Browser final mismatch
- -
- Blocked/errors
- -/-
No browser metadata items are available.
Domain Infrastructure
- Status
- -
- Domains
- -
- DNS / TLS
- -/-
- New domains
- -
- Recent certs
- -
- Blocked/errors
- -/-
No domain infrastructure items are available.
Attachment Coverage
- QR URLs
- none
- PDF QR URLs
- none
- PDF QR scan
- available or not needed
- OCR login page
- not detected
- Disk image / LNK
- -
- Unsupported containers
- -
Threat Intel
- Status
- -
- Matches
- -
- Malicious
- -
- Suspicious
- -
- Sources
- -
No SecurityFabric threat-intel hits are attached to this case.
Pipeline
- Tenant
- tenant-dev
- Evidence ID
- EVID-20260511-0011
- Queue job
- 46
- Run ID
- -
- Closed by
- -
- Close reason
- -
- Closure note
- -
Artifacts
No artifact paths are available for this case yet.
Comments
No analyst comments yet.
Notifications
No notification events yet.