When you open an email from the Inbox page, you'll be shown the message body, header, raw body, and details about links, domains, and attachments. You'll be able to move, archive, delete, and mark the email.
Email Actions
The buttons at the top of the email allow you to move, archive, mark as read/unread, delete, flag, or clone the email.
marks the message as read/unread.
marks the message as flagged/unflagged.
deletes the message.
causes the Archive & Respond popup to appear. This popup lets you mark the message according to a specific threat type (spam, phishing, or no threat). You can also choose to send out an email to the endpoint that reported the message by toggling on the checkbox. This will send an email to the individual that reported the email.
The URLs and Domains tabs at the bottom of the Archive & Respond popup lets you add URLs/domains found inside the email to the Watchlist (described in the Inbox article). These select boxes are only visible if you are marking the email as phishing.
create a new phishing email template out of the message. Clicking this button will display the Clone popup that lets you choose certain settings about the email. You will need to set a from name, from email, domain, subject, and choose a training or landing page to attach to the new template that will be created. After you choose your settings and click Clone Now, a new template will appear on your Manage Templates page. Its name will be that of the subject of the originally reported email, as it appears in Inbox.
Preview
The Preview tab shows the email as it would appear in any inbox.
Raw Message
This tab shows the HTML body of the message.
Header
This tab shows the headers of the email in table format.
Domains
This tab lists domains in the email and threat info (if any).
Links
This tab lists any links inside the email and threat info (if any).
Email with an eml file
Many reporting apps will report emails by sending them as eml files. To make examining these emails easier, an email containing an eml file will open in a split screen view. The eml file will be displayed on the left side of the screen and the containing email will display on the right.