Suspicious senders are senders of malicious or suspicious email messages. Find patterns
in spoofed sender addresses and learn which social engineering techniques are employed.
For example, the sender's email address appears as internal addresses, financial services
(PayPal, banks), or other services (Gmail, Taobao, Amazon). Check the sender domain
addresses and associated risk level to change policy settings or settings on the anti-spam
gateway to block the suspicious sender email addresses at your mail gateway.
Procedure
- Go to .
- Specify the search criteria.
- Sender (email address)
- Period
- Press ENTER.All email messages matching the search criteria appear.
- View the results.HeaderDescriptionSenderView the sending email address of the detected message.DetectionsView the email messages with malicious or suspicious characteristics. Signature-based detection involves searching for known patterns of data within executable code or behavior analysis. Click the number to see more information about the suspicious message.High RiskView the detected messages with malicious characteristics.Medium RiskView the detected messages with characteristics that are most likely malicious.Low RiskView the detected spam messages or detected messages with content violations or suspicious characteristics.Spam/GraymailView the number of detected spam messages or graymail.Content ViolationView the number of detected messages with content violations.DLP IncidentView the number of detected messages with DLP incidents.View the number of email messages with embedded malicious links.View the number of file attachments that are detected by policy rules.Latest DetectionView the most recent occurrence of the detected message.