When you open an email from the Inbox page, you'll be shown the message body, header, raw body, and details about links, domains, and attachments. You'll be able to move, archive, delete, and mark the email.
The buttons at the top of the email allow you to move, archive, mark as read/unread, delete, flag, or clone the email.
marks the message as read/unread
marks the message as flagged/unflagged
deletes the message
causes the Archive & Respond popup to appear. This popup lets you mark the message according to a specific threat type (spam, phishing, or no threat). You can also choose to send out an email to the endpoint that reported the message by toggling on the Respond to Reporter checkbox. This will send an email to the individual that reported the email.
The URLs and Domains tabs at the bottom of the Archive & Respond popup lets you add URLs/domains found inside the email to the Blocklist (described in the Inbox article). These select boxes are only visible if you are marking the email as phishing.
create a new phishing email template out of the message. Clicking this button will display the Clone popup that lets you choose certain settings about the email. You will need to set a from name, from email, domain, subject, and choose a training or landing page to attach to the new template that will be created. After you choose your settings and click Clone Now, a new template will appear on your Manage Templates page. Its name will be that of the subject of the originally reported email, as it appears in Inbox.
The Preview tab shows the email as it would appear in any inbox.
This tab shows the HTML body of the message.
This tab shows the headers of the email in table format.
This tab lists domains in the email and threat info (if any).
This tab lists any links inside the email and threat info (if any).
Email with an eml file
Many reporting apps will report emails by sending them as eml files. To make examining these emails easier, an email containing an eml file will open in a split screen view. The eml file will be displayed on the left side of the screen and the containing email will display on the right.