Search investigations
Metadata fields match by literal case-insensitive prefix; SHA-256 and IOC values match exactly after canonicalization. Message bodies and raw source are not searchable by design.
No investigations matched.
No case selected
Pick an investigation from the list, or create a new case to start attaching evidence.
Add email evidence
Batch evidence
Upload up to the deployment's batch limit of .eml/.msg files. Parsing is local-only - no content interpretation and no remote reputation runs. A partially failed batch is a normal result: completed items stay attached.
No batches this session. Earlier batch activity appears in the history below.
Artifacts
No artifacts yet. Attach an email above, or migrate a browser analysis.