Investigations
Evidence Center
Investigations
Evidence Center
Case Artifacts
Evidence
Report artifacts, score/debug links, and pipeline evidence paths exposed by the read API.
Evidence Rows
Filter by evidence type, free text, or updated range.
| Case | Message Source | Artifacts | Extracted Evidence | Enrichment | Pipeline |
|---|---|---|---|---|---|
| INC-20260511-0007 EVID-20260511-0007 | Action required: password expires today micros0ft-login.example alex.reporter@example.test |
| URLs: 3 Attachments: 1 QR/PDF QR: 1/no Containers/LNK: 0/0 Theme: credential_or_mfa_collection Platforms: forms_or_survey, security_wrapper, url_shortener | Redirected: 2 Final mismatch: 1 Blocked: 1 Infra domains: 4 Domain DNS/TLS: 4/2 New/certs/blocked: 1/1/1 Browser items/forms/checks: 1/1/1 Brand/download blocks: 1/1 Gaps: url_targets_blocked_for_safety, domain_private_resolution_blocked, browser_download_attempt_blocked, browser_form_submission_blocked | 20260511_115512_0000_EVID-20260511-0007 2026-05-11T12:04:22Z |
| INC-20260511-0008 EVID-20260511-0008 | Invoice INV-44821 for April services contoso.example maria.sales@example.test |
| URLs: 0 Attachments: 1 QR/PDF QR: 0/no Containers/LNK: 0/0 Theme: invoice_or_payment Platforms: - | Redirected: 0 Final mismatch: 0 Blocked: 0 Infra domains: 0 Domain DNS/TLS: 0/0 New/certs/blocked: 0/0/0 Browser items/forms/checks: 0/0/0 Brand/download blocks: 0/0 Gaps: url_enrichment_off, domain_enrichment_off, threat_intel_off | 20260511_121001_0000_EVID-20260511-0008 2026-05-11T12:19:10Z |
| INC-20260511-0009 EVID-20260511-0009 | Limited time renewal discount mailer.example sam.finance@example.test |
| URLs: 7 Attachments: 0 QR/PDF QR: -/no Containers/LNK: -/- Theme: - Platforms: - | Redirected: - Final mismatch: - Blocked: - Infra domains: - Domain DNS/TLS: -/- New/certs/blocked: -/-/- Browser items/forms/checks: -/-/- Brand/download blocks: -/- Gaps: - | 20260511_122407_0000_EVID-20260511-0009 2026-05-11T12:29:12Z |
| INC-20260511-0010 EVID-20260511-0010 | Updated employee handbook attached sharepoint-files.example nora.hr@example.test |
| URLs: 2 Attachments: 2 QR/PDF QR: -/no Containers/LNK: -/- Theme: - Platforms: - | Redirected: - Final mismatch: - Blocked: - Infra domains: - Domain DNS/TLS: -/- New/certs/blocked: -/-/- Browser items/forms/checks: -/-/- Brand/download blocks: -/- Gaps: - | 20260511_123900_0000_EVID-20260511-0010 2026-05-11T12:44:31Z |
| INC-20260511-0011 EVID-20260511-0011 | Shared voicemail transcription pbx.example devon.it@example.test | No artifact paths exposed. | URLs: 0 Attachments: 1 QR/PDF QR: -/no Containers/LNK: -/- Theme: - Platforms: - | Redirected: - Final mismatch: - Blocked: - Infra domains: - Domain DNS/TLS: -/- New/certs/blocked: -/-/- Browser items/forms/checks: -/-/- Brand/download blocks: -/- Gaps: - | - 2026-05-11T12:52:00Z |
| INC-20260511-0012 EVID-20260511-0012 | Team lunch reminder example.test li.ops@example.test |
| URLs: 0 Attachments: 0 QR/PDF QR: -/no Containers/LNK: -/- Theme: - Platforms: - | Redirected: - Final mismatch: - Blocked: - Infra domains: - Domain DNS/TLS: -/- New/certs/blocked: -/-/- Browser items/forms/checks: -/-/- Brand/download blocks: -/- Gaps: - | 20260511_125900_0000_EVID-20260511-0012 2026-05-11T13:04:10Z |