The Search Emails page allows admins to find and investigate email events. Admins can use a range of filters to find the emails for their specific analysis.

The filters available include:

• External recipients
  • View any emails that contain at least one external recipient, such as a recipient from a third-party or webmail address
• Add-in
  • View events sent from a Microsoft Outlook add-in or the gateway
• Attachments
  • View emails that contain at least one attachment
• Advice type
  • View any combination of Prevent nudge types
• Advice response
  • View any combination of user responses to Prevent nudges

The results table dynamically updates when any combination of filters is selected or deselected.

Search Results

The search results returned include:

• Email details
  • Time and date stamp of when the email was sent
  • Subject: only displayed if you have chosen to sync this data with Prevent)
  • Sender and recipients
  • External or Internal
  • Sent from: add-in or gateway
• Outcome
  • If the end-user was nudged with advice from Prevent: Yes or No
  • Which Prevent nudge was provided, and what the user's response was
• Impact
  • If the email contained an attachment: Yes or No
  • All the data types identified in that email

Email Details

To see more granular information about a specific email, select it to view the Email Details tab.

More details about the specific findings of the email will be displayed in this tab. The unique Message ID can be copied and used to investigate the contents of an email further.

The following cards will be displayed, allowing you to view more information:

• Event Summary
  • A high-level overview of the email, including time of sending, attachments, recipients, and the Prevent nudge type and nudge response.
• Information
  • Contextual data or data matches relating to the email, such as content type matches detected and if any Data Loss Prevention (DLP) policies were triggered by the email.
• Prevent-specific advice
  • This card details specific nudges and admin responses, including content analysis details and a recipient change log consisting of an itemized list of flagged recipients and whether the sender has removed them from the email.