Operations

Case Workbench

Live phish triage queue for reported-message review and analyst follow-up.

Total6
Open4
Queued1
Running1
Completed3
Failed1
Malicious1
High/Critical2

Case Queue

Triage, closure, message, reporter, signal, and run context for current cases.

6 shown
Reset
CaseStateVerdict / RiskMessageReporterAuth
INC-20260511-0007
age: 114d
analysis_completed
open
malicious
high/ 87.5%
Action required: password expires today
IT Helpdesk <it-support@micros0ft-login.example>
alex.reporter@example.test
SPF: failDKIM: noneDMARC: fail
INC-20260511-0008
age: 114d
analysis_completed
closed
benign
low/ 8.5%
Invoice INV-44821 for April services
Contoso Billing <billing@contoso.example>
maria.sales@example.test
SPF: passDKIM: passDMARC: pass
INC-20260511-0009
age: 114d
analysis_running
open
spam
medium/ 41.2%
Limited time renewal discount
Newsletter <promo@mailer.example>
sam.finance@example.test
SPF: passDKIM: passDMARC: none
INC-20260511-0010
age: 114d
analysis_failed
open
unknown
critical/ 93.4%
Updated employee handbook attached
HR Shared Drive <hr-docs@sharepoint-files.example>
nora.hr@example.test
SPF: softfailDKIM: noneDMARC: fail
INC-20260511-0011
age: 114d
queued_for_analysis
open
pending
low/ -
Shared voicemail transcription
Voice Mail <voicemail@pbx.example>
devon.it@example.test
SPF: -DKIM: -DMARC: -
INC-20260511-0012
age: 114d
analysis_completed
closed
benign
low/ 3.5%
Team lunch reminder
Office Ops <office.ops@example.test>
li.ops@example.test
SPF: passDKIM: passDMARC: pass