Introduction

NOTE: If you would like to send this information to end client employees, and other users without a Field Effect MDR Portal and/or Help Center account, simply download the PDF attached to this article (bottom) and you can distribute that.

This article outlines the workflow for end users submitting emails to the Suspicious Email Analysis Service (SEAS), which is available for Gmail and Outlook. To learn more about how SEAS functions and ranks emails, visit our knowledge base (http://support.fieldeffect.com).

Your organization’s (or MSP) administrator must configure SEAS before users can submit emails to SEAS. Configuration instructions for SEAS are available in our knowledge base.

Table of contents

• When Should You Submit an Email to SEAS?
• Submitting an Email to SEAS
  • Step 1 - The SEAS plugin    
  • Step 2 - The SEAS questionnaire
  • Step 3 - Your results

When Should You Submit an Email to SEAS?

Whenever you receive an email that seems suspicious, it would be worth submitting the email to SEAS for analysis. Example of emails that could be candidates for SEAS include:

• Emails claiming to be from within your organization that have the incorrect domain name.
  • Example: “fieldefect.com” instead of “fieldeffect.com”
• Emails claiming to be within your organization that are asking for funds to be transferred.
  • Example: CEO asking you purchase gift cards or send money to a non-organizational email.
• Emails claiming to be from a well-known company asking you to move money, click a link, or take a survey.

At the end of the day, if there is any email you that you find suspicious in any way, it should be sent to SEAS. 

Submitting an Email to SEAS

Step 1 - The SEAS plugin

When receiving an email that seems suspicious, you can send it to SEAS by clicking the SEAS icon within your email client.

The SEAS icon within Outlook is located in the top ribbon’s Home tab.

Step 2 - The SEAS questionnaire

The SEAS questionnaire will open on your screen. Fill out the questionnaire to give our analysts as much context as possible to help with their analysis. After filling out the questionnaire, click Submit.  

Step 3 - Your results

Once the email has been analyzed, you’ll receive an email notification that contains all the information regarding your submission and next steps.

The example below shows an email notification for a SEAS submission that was given a status of “malicious”. This notification includes a synopsis of how the SEAS investigation concluded, and what caused the email to be given its status.