Operations
Ingest
Test triage workflow
Outlook Report Phish and mailbox polling stay on the backend. This is the frontend test path: upload a .eml, get a case, then open it to comment or close.
Ingest sources
| Source | Type | Status |
|---|---|---|
| Microsoft 365 Report Phish | Mailbox add-in | Active |
| Reporter mailbox forward | SMTP forward | Active |
| Manual upload | .eml upload | Active |
M365 connectors
| Tenant | Mailbox scope | Status |
|---|---|---|
| tenant-dev.onmicrosoft.com | All mailboxes | Connected |
| tenant-dev-eu.onmicrosoft.com | EU region mailboxes | Pending consent |
Recent intake
| Case | Mailbox | Status | Created |
|---|---|---|---|
| INC-20260511-0007 | phish-report@example.test | analysis_completed | 2026-05-11T11:55:12Z |
| INC-20260511-0008 | phish-report@example.test | analysis_completed | 2026-05-11T12:10:01Z |
| INC-20260511-0009 | phish-report@example.test | analysis_running | 2026-05-11T12:24:07Z |
| INC-20260511-0010 | phish-report@example.test | analysis_failed | 2026-05-11T12:39:00Z |
| INC-20260511-0011 | phish-report@example.test | queued_for_analysis | 2026-05-11T12:52:00Z |
| INC-20260511-0012 | phish-report@example.test | analysis_completed | 2026-05-11T12:59:00Z |