Operations

Case Workbench

Live phish triage queue for reported-message review and analyst follow-up.

Total3
Open1
Queued0
Running0
Completed3
Failed0
Malicious1
High/Critical1

Case Queue

Triage, closure, message, reporter, signal, and run context for current cases.

3 shown
Reset
AllQueuedRunningCompletedFailed
CaseStateVerdict / RiskMessageReporterAuth
INC-20260511-0007
age: 114d
analysis_completed
open
malicious
high/ 87.5%
Action required: password expires today
IT Helpdesk <it-support@micros0ft-login.example>
alex.reporter@example.test
SPF: failDKIM: noneDMARC: fail
INC-20260511-0008
age: 114d
analysis_completed
closed
benign
low/ 8.5%
Invoice INV-44821 for April services
Contoso Billing <billing@contoso.example>
maria.sales@example.test
SPF: passDKIM: passDMARC: pass
INC-20260511-0012
age: 114d
analysis_completed
closed
benign
low/ 3.5%
Team lunch reminder
Office Ops <office.ops@example.test>
li.ops@example.test
SPF: passDKIM: passDMARC: pass