Triage
- Risk
- 3.5%
- Confidence
- high
- Action
- close_as_benign
- Status
- analysis_completed
- All authentication passed
- Internal sender
- No URLs or attachments
Catcher
Overview
←
Case Detail
INC-20260511-0012
Team lunch reminder
benignlowanalysis_completed
Message
- From
- Office Ops <office.ops@example.test>
- Sender domain
- example.test
- Reporter
- li.ops@example.test
- Reply-To
- office.ops@example.test
- Return-Path
- office.ops@example.test
- Message ID
- <m365-report-0012@example.test>
Signals
- SPF
- pass
- DKIM
- pass
- DMARC
- pass
- Clickable URLs
- 0
- Shorteners
- 0
- Attachments
- 0
- Attachment reputation
- clean
- Stego reviews
- 0
- QR decoded
- -
- Containers
- -
- Lure theme
- -
- Platforms
- -
- Objectives
- -
- URL enrichment
- -
- Domain enrichment
- -
- Redirects
- -
- Final mismatch
- -
- Browser forms
- -/-
- Threat intel
- -
- Intel matches
- -
Pipeline
- Tenant
- tenant-dev
- Evidence ID
- EVID-20260511-0012
- Queue job
- 47
- Run ID
- 20260511_125900_0000_EVID-20260511-0012
- Closed by
- policy:auto-close
- Close reason
- -
- Closure note
- Closed by policy action: close_as_benign