Malicious Email Inventory - Triage, analyze, and act on malicious email threats - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR 5.x Documentation

Product
Cortex XDR
License
XDR + Cloud
Creation date
2025-07-13
Last date published
2026-06-11
Category
Administrator Guide
Abstract

Triage, analyze, and act on malicious email threats

Notice

Requires the Advanced Email Security module.

Simplify your email threat triage with the Malicious Emails Inventory. Designed specifically for malicious email analysis, this dedicated view provides immediate context on which emails were suspicious and why emails were flagged, enabling you to view and act on malicious emails from a timeframe you select, and pivot to other views for forensic investigations and remediation actions.

Find the inventory under ModulesEmail SecurityMalicious Emails Inventory.

Use the three widgets at the top of the screen to get an overview of the malicious emails that were detected by the module.

If you filter any of the widgets or the table, all the widgets and the table on the page are updated accordingly.