You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/cloudflare-one/email-security/investigation/search-email.mdx
-41Lines changed: 0 additions & 41 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -72,47 +72,6 @@ To modify your screening criteria, under **Active screen criteria**, select **Mo
72
72
73
73
To reset your screening criteria, select **Reset**.
74
74
75
-
## Reclassify messages
76
-
77
-
Reclassifying messages allows you to choose the disposition of your messages if the disposition is incorrect.
78
-
79
-
To reclassify a message:
80
-
81
-
1. In [Cloudflare One](https://one.dash.cloudflare.com/), go to **Email security** and select **Investigation**.
82
-
2. On the Investigation page, under **Your matching messages**, select the message you want to reclassify.
83
-
3. Select the three dots, then select **Request reclassification**.
84
-
4. Under **New disposition**, select among the following:
85
-
-**Malicious**: Traffic invoked multiple phishing verdict triggers, met thresholds for bad behavior, and is associated with active campaigns.
86
-
-**Spoof**: Traffic associated with phishing campaigns that is either non-compliant with your email authentication policies (SPF, DKIM, DMARC) or has mismatching Envelope From and Header From values.
87
-
-**Spam**: Traffic associated with non-malicious, commercial campaigns.
88
-
-**Bulk**: Traffic associated with [Graymail](https://en.wikipedia.org/wiki/Graymail_%28email%29), that falls in between the definitions of SPAM and SUSPICIOUS. For example, a marketing email that intentionally obscures its unsubscribe link.
89
-
-**Clean**: Traffic not associated with any phishing campaigns.
90
-
5. Select **Save**.
91
-
92
-
To reclassify messages in bulk, select **Select all messages** > **Action** > **Request reclassification**.
93
-
94
-
To release messages in bulk, select **Select all messages** > **Action** > **Release**.
95
-
96
-
### Upload EML files
97
-
98
-
Email security classifies certain emails as "Clean". If you disagree with the disposition, you can upload an EML file and reclassify the email.
99
-
100
-
On the **Investigation** page:
101
-
102
-
1. Go to the email marked as Clean.
103
-
2. Select the three dots > **Request reclassification**.
104
-
3. Upload the EML file.
105
-
4. Select a new disposition.
106
-
5. Select **Save**.
107
-
108
-
Once you have reclassified your messages, you can access those on Reclassifications.
109
-
110
-
To view reclassifications:
111
-
112
-
1. Log in to [Cloudflare One](https://one.dash.cloudflare.com/).
3. Choose **Team submissions** to view emails your security team submitted for reclassification, or **User submissions** to view emails your users submitted for reclassification.
115
-
116
75
## Move messages
117
76
118
77
Moving messages allows you to move messages to a specific folder. You can move up to 1,000 messages at a time.
Copy file name to clipboardExpand all lines: src/content/docs/cloudflare-one/email-security/phishguard.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@ PhishGuard is a team of analysts that routinely inspects your email environment
9
9
10
10
While Email security uses advanced technologies to protect your email inbox, PhishGuard offers an additional human component to protect your email environment against impersonation events, suspicious items, false negatives/false positives, and any new event that automated intelligent systems may miss due to a lack of context (for example, a compromised account activity).
11
11
12
-
PhishGuard only works on a post-delivery environment (only emails that have already landed in your email inbox are reviewed). As a result, PhishGuard analysts may perform a [reclassification](/cloudflare-one/email-security/investigation/search-email/#reclassify-messages) or [auto-move](/cloudflare-one/email-security/settings/auto-moves/) based on their findings.
12
+
PhishGuard only works on a post-delivery environment (only emails that have already landed in your email inbox are reviewed). As a result, PhishGuard analysts may perform a [reclassification](/cloudflare-one/email-security/reclassifications/#reclassify-messages) or [auto-move](/cloudflare-one/email-security/settings/auto-moves/) based on their findings.
13
13
14
14
PhishGuard coordinates with the email detections team, allowing you to directly request immediate detection for specific items and implement custom detections unique to your needs. An example of this is requesting to block all PayPal traffic if you do not use PayPal for invoicing. This capability allows you to take ownership over the rules governing your email environment through PhishGuard's human intervention.
Copy file name to clipboardExpand all lines: src/content/docs/cloudflare-one/email-security/setup/index.mdx
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -91,7 +91,7 @@ You should review your impersonation registry on a quarterly basis as roles chan
91
91
92
92
## 4. Reclassify messages
93
93
94
-
A reclassification is a change to an email's disposition **after** initial scanning. It is Cloudflare's built-in feedback loop for correcting false positives/negatives **and** training the detection models to get smarter over time. Refer to [Reclassify messages](/cloudflare-one/email-security/investigation/search-email/#reclassify-messages) to learn how to reclassify a message.
94
+
A reclassification is a change to an email's disposition **after** initial scanning. It is Cloudflare's built-in feedback loop for correcting false positives/negatives **and** training the detection models to get smarter over time. Refer to [Reclassify messages](/cloudflare-one/email-security/reclassifications/#reclassify-messages) to learn how to reclassify a message.
95
95
96
96
### Who can reclassify messages
97
97
@@ -104,7 +104,7 @@ Reclassifications are critical because:
104
104
-**They help improve model accuracy**: Every validated reclassification teaches Cloudflare's machine learning to recognise new lures, language, infrastructure, and benign patterns.
105
105
-**They reduce alert fatigue**: Correcting Suspicious or Spam emails that users actually want tailors detections to your organization, cutting noise in the dashboard.
106
106
-**They close the remediation loop**: When a disposition is upgraded to Malicious, Cloudflare auto-moves those emails out of every inbox (Graph API or Google Workspace API integrations).
107
-
-**They can help you log activity taken on any reclassification**: Each reclassification displays a submission ID, details about original, requested and final dispositions, and more. Refer to [Reclassify messages](/cloudflare-one/email-security/investigation/search-email/#reclassify-messages) to learn more about reclassifications.
107
+
-**They can help you log activity taken on any reclassification**: Each reclassification displays a submission ID, details about original, requested and final dispositions, and more. Refer to [Reclassify messages](/cloudflare-one/email-security/reclassifications/#reclassify-messages) to learn more about reclassifications.
0 commit comments