Viewing SEAS Reports in the MDR Portal

Introduction

A Note for Partners: this page is only accessible on a on a per-client basis. Ensure that the Organization Selector is set to the appropriate client before continuing.

The SEAS page (Reports & Analysis section) is the core interface for the SEAS service. It looks very similar to the AROs page but instead lists all suspicious email submissions. The page works like a traditional email client; email submissions are listed in the left panel, and the central panel displays information about a selected submission.

From the SEAS page you can view:

Details about the email (Sender, date, report date, etc.).
A summary about the email explaining why the submission was deemed Likely Safe, Suspicious, or Malicious.
Any ARO that may be related to, or the result of, the submitted email.
Geographic details about the submitted email’s origin and destination.
Details about the sender (email, display name, IP address, mail service, etc.).

Email Status

Once an email is analyzed by SEAS, it will get one of the following statuses:

Pending: The email has been submitted, but our analysts have yet to review it.
Likely Safe: After the analysis, our experts have deemed the email as likely safe.
Suspicious: After the analysis, our experts have deemed the email as a potential security concern.
Malicious: After the analysis, our experts have deemed the email to be a security threat.
Inconclusive: The submission had insufficient indicators to conclusively identify the email as being safe or malicious.
Spam: After the analysis, the email was deemed to be a spam email.
Phishing Simulation: After the analysis, the email was identified as originating from a phishing simulation platform.