Analyzing and Reporting Threats to a Single Email Address

You may want to investigate a threat to a single email address. If you use INKY, viewing the details of a single threat gives you the option to report that threat to Barracuda XDR to help prevent that threat from recurring for yourself and others.

Users with Barracuda Email Protection

If you use Barracuda Email Protection, when you open the analysis results of an email, you have a variety of remediation options you can take:

• Delete email from my user's mailbox
• Quarantine
• None

To see the details of a threat to an email address

1. In Barracuda XDR Dashboard, click Intelligence > Email Security.
2. In the Analysis Results section, click a row.
   The Message Details pop-up opens, displaying additional details about the message.

To remediate a single email if you use Barracuda Email Protection

1. In Barracuda XDR Dashboard, click Intelligence > Email Security.
2. In the Analysis Results section, click a row.
3. In the Message Details pop-up, in the Remediate section, click Remediation: Incident Response.
4. In Remediate Action, do any of the following: 
   
   • Select the remediation action: 
5. Click Submit.

To report a threat to a single email address if you use INKY

1. In Barracuda XDR Dashboard, click Intelligence > Email Security.
2. In the Analysis Results section, click a row.
3. In the User Reports section, click Report this Email.
4. In the Email Protection: Report This Email page, do the following:
   • Sign in or type your contact address.
   • Select a label for this message: Safe, Spam, or Phishing.
   • Optionally, type a comment.
   • Optionally, enable either of the check boxes: I clicked a link or I opened an attachment.
5. Click Submit.

To create an incident from an email threat

1. In Barracuda XDR Dashboard, click Intelligence > Email Security.
2. In the Analysis Results section, click a row.
3. Click Remediation: Incident Response.
4. In the Remediate section, select your options.
5. Click Create Incident.