View quarantined message details

Click a message subject in any quarantine list to open Message Details.

Message details tabs

The available tabs depend on the quarantine list the message belongs to.

Details

Shows general information about the message.

For messages in Post-delivery quarantine, you can see whether the message was quarantined due to a clawback. For guidance on managing clawed-back messages, see the following interactive guide:

Manage clawed-back messages in post-delivery quarantine

Raw Header

Shows the email header details.

You can click AI Analysis to view an AI-generated summary of the message authentication results and security analysis, including SPF, DKIM, and DMARC verdicts. For more information, see AI Analysis.

The following interactive guides are available:

Message

Shows the body of the email.

For messages in M365 quarantine, opening the Message tab connects to Microsoft services to get the message content. You must acknowledge the connection request before the content is displayed. This process may take longer than usual.

Attachments

Shows the name and size of message attachments.

For messages in Email security quarantine, you can perform the following actions:

Download one or more attachments.
Strip and reattach attachments.
Reattach attachments removed by Data Control rules.

For messages in Post-delivery quarantine, you can download one or more attachments.

For messages in M365 quarantine, you can view only attachment names and sizes.

URLs

Shows URLs found in the message.

Intelix threat analysis

For messages quarantined by SophosLabs Intelix threat analysis, you can click View Report to see the Intelix Threat Summary.

If a message containing attachments was quarantined for another reason before Intelix scanned it, you can submit it for analysis.