Skip navigation
All Places > Products > RSA NetWitness Platform > RSA NetWitness Platform Online Documentation > Documents
Log in to create and rate content, and to follow, bookmark, and share content with other members.

Investigate: Events View - Email Panel

Document created by RSA Information Design and Development on Apr 23, 2020Last modified by RSA Information Design and Development on Apr 23, 2020
Version 2Show Document
  • View in full screen mode
 

In the Email panel (Events > Email), you can view a list of email received and associated attachments for an event.

Workflow

the workflow of an investigation with the task to examine files highlighted

Related Topics

Quick Look

The Email panel displays a list of emails associated with a network event. When an analyst opens the email, the email reconstruction is displayed along with the associated attachments and additional header details, if any.
The following figure highlights the features of the email reconstruction.

Displays the features and fields related to email analysis

 

                         
1Displays the details of the selected event.
2

Displays the details of the email header.

3Clicking this expands and collapses the email.
4Displays the content of the email.
5ClickingShow Remaining % displays the complete email.

The following table describes all the fields within an email.

                                       
FieldDescription
FromDisplays the email address of the sender of the email.
ToDisplays the email addresses of the recipients of the email.
CC (Carbon Copy)Displays email addresses of additional recipients of the email. The field is displayed only if the sent email has any value and the email addresses are visible to the recipient.
BCCDisplays email addresses of additional recipients privately. This field is displayed only if the sent email has any value and the email addresses are not visible to the recipient.
SubjectDisplays the subject of the email.
Attachments

Displays any files shared by the sender that can be downloaded by the recipient. This field is displayed only if email contains attachments.

Additional Header Details

Provides additional details of the email event such as Received, Sender, Message-ID and others.

Previous Topic:Events View
You are here
Table of Contents > Investigate Reference Materials > Events View - Email Panel

Attachments

    Outcomes