From b3677ae7a6df1d383f1ed7fc621ac77ea8e4f03f Mon Sep 17 00:00:00 2001 From: Maddy <130055405+Maddy-Cloudflare@users.noreply.github.com> Date: Wed, 5 Feb 2025 14:38:05 +0000 Subject: [PATCH 1/5] [Email Security] Add Reclassifications --- .../email-monitoring/search-email.mdx | 38 ++++++++++++++++++- 1 file changed, 37 insertions(+), 1 deletion(-) diff --git a/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx b/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx index 0d0d29c739252c4..6127648d1222fb1 100644 --- a/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx +++ b/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx @@ -72,7 +72,43 @@ To modify your screening criteria, under **Active screen criteria**, select **Mo To reset your screening criteria, select **Reset**. -## Reclassify messages +## Reclassifications + +Reclassifications allows you to monitor emails your security team or users requested to be reclassified. To view reclassifications: + +1. Log in to [Zero Trust](https://one.dash.cloudflare.com/). +2. Select **Email Security** > **Reclassifications**. +3. Choose **Team submissions** to view emails your security team submitted for reclassification. **User submissions** to view emails your users submitted for reclassification. + +### Team submissions + +Team submissions allows you to to view emails your security team submitted for reclassification. All team submissions receive a human review by Cloudflare. + +Select among the following filters: + +1. **Date Range**: You can select a date range from the last 7, last 30, and last 90 days. +2. **Original disposition**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). +3. **Submitted as**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). +4. **Final disposition**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). +5. **Escalation**: This field describes whether the team submissions has been escalated or not. Select among `Yes`, `No`, or `All`. + +Once you have selected all the filters, select **Apply filters**. + +The dashboard will populate the table with the list of emails your security team submitted for reclassification, including a **Submission ID**, and the **Email subject**. + +### User submissions + +User submissions allows you to view the emails your users submitted for reclassification. User submissions help enhance our detection model, but can be escalated for human review. + +1. **Date Range**: You can select a date range from the last 7, last 30, and last 90 days. +2. **Original disposition**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). +3. **Submitted as**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). + +Once you have selected all the filters, select **Apply filters**. + +The dashboard will populate the table with the list of emails your users submitted for reclassification, including a **Submission ID**, and the **Email subject**. + +### Reclassify messages Reclassifying messages allows you to choose the disposition of your messages if the disposition is incorrect. From 4284a16eb3a7aa938951aac437db5d90a81b96cd Mon Sep 17 00:00:00 2001 From: Maddy <130055405+Maddy-Cloudflare@users.noreply.github.com> Date: Wed, 5 Feb 2025 14:43:07 +0000 Subject: [PATCH 2/5] Update src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx Co-authored-by: hyperlint-ai[bot] <154288675+hyperlint-ai[bot]@users.noreply.github.com> --- .../cloudflare-one/insights/email-monitoring/search-email.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx b/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx index 6127648d1222fb1..2415a0995a2bfbc 100644 --- a/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx +++ b/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx @@ -82,7 +82,7 @@ Reclassifications allows you to monitor emails your security team or users reque ### Team submissions -Team submissions allows you to to view emails your security team submitted for reclassification. All team submissions receive a human review by Cloudflare. +Team submissions allows you to view emails your security team submitted for reclassification. All team submissions receive a human review by Cloudflare. Select among the following filters: From f7e28c9e98dffadf43b1e41dab2408dbf640866c Mon Sep 17 00:00:00 2001 From: Maddy <130055405+Maddy-Cloudflare@users.noreply.github.com> Date: Wed, 5 Feb 2025 15:28:10 +0000 Subject: [PATCH 3/5] Slightly modify page --- .../email-monitoring/search-email.mdx | 40 +++++++++---------- 1 file changed, 20 insertions(+), 20 deletions(-) diff --git a/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx b/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx index 2415a0995a2bfbc..881396a1420ba77 100644 --- a/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx +++ b/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx @@ -72,9 +72,27 @@ To modify your screening criteria, under **Active screen criteria**, select **Mo To reset your screening criteria, select **Reset**. -## Reclassifications +## Reclassify messages -Reclassifications allows you to monitor emails your security team or users requested to be reclassified. To view reclassifications: +Reclassifying messages allows you to choose the disposition of your messages if the disposition is incorrect. + +To reclassify a message: + +1. On the **Investigation** page, under **Your matching messages**, select the message you want to reclassify. +2. Select the three dots, then select **Reclassify**. +3. Under **New disposition**, select among the following: + * **Malicious**: Traffic invoked multiple phishing verdict triggers, met thresholds for bad behavior, and is associated with active campaigns. + * **Spoof**: Traffic associated with phishing campaigns that is either non-compliant with your email authentication policies (SPF, DKIM, DMARC) or has mismatching Envelope From and `Header From` values. + * **Spam**: Traffic associated with non-malicious, commercial campaigns. + * **Bulk**: Traffic associated with [Graymail](https://en.wikipedia.org/wiki/Graymail_%28email%29), that falls in between the definitions of `SPAM` and `SUSPICIOUS`. For example, a marketing email that intentionally obscures its unsubscribe link. + * **Clean**: Traffic not associated with any phishing campaigns. +4. Select **Save**. + +To reclassify messages in bulk, select the messages you want to reclassify > **Action** > **Reclassify**. + +Once you have reclassified your messages, you can access those on **Reclassifications**. + +To view reclassifications: 1. Log in to [Zero Trust](https://one.dash.cloudflare.com/). 2. Select **Email Security** > **Reclassifications**. @@ -108,24 +126,6 @@ Once you have selected all the filters, select **Apply filters**. The dashboard will populate the table with the list of emails your users submitted for reclassification, including a **Submission ID**, and the **Email subject**. -### Reclassify messages - -Reclassifying messages allows you to choose the disposition of your messages if the disposition is incorrect. - -To reclassify a message: - -1. On the **Investigation** page, under **Your matching messages**, select the message you want to reclassify. -2. Select the three dots, then select **Reclassify**. -3. Under **New disposition**, select among the following: - * **Malicious**: Traffic invoked multiple phishing verdict triggers, met thresholds for bad behavior, and is associated with active campaigns. - * **Spoof**: Traffic associated with phishing campaigns that is either non-compliant with your email authentication policies (SPF, DKIM, DMARC) or has mismatching Envelope From and `Header From` values. - * **Spam**: Traffic associated with non-malicious, commercial campaigns. - * **Bulk**: Traffic associated with [Graymail](https://en.wikipedia.org/wiki/Graymail_%28email%29), that falls in between the definitions of `SPAM` and `SUSPICIOUS`. For example, a marketing email that intentionally obscures its unsubscribe link. - * **Clean**: Traffic not associated with any phishing campaigns. -4. Select **Save**. - -To reclassify messages in bulk, select the messages you want to reclassify > **Action** > **Reclassify**. - ## Move messages Moving messages allows you to move messages to a specific folder. From 1c919278b5e6f0427ad2b0687a7bc21470d338a8 Mon Sep 17 00:00:00 2001 From: Maddy <130055405+Maddy-Cloudflare@users.noreply.github.com> Date: Wed, 5 Feb 2025 20:42:17 +0000 Subject: [PATCH 4/5] Apply suggestions from code review Co-authored-by: Pedro Sousa <680496+pedrosousa@users.noreply.github.com> --- .../insights/email-monitoring/search-email.mdx | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx b/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx index 881396a1420ba77..3bb1724e1f90c92 100644 --- a/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx +++ b/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx @@ -96,11 +96,11 @@ To view reclassifications: 1. Log in to [Zero Trust](https://one.dash.cloudflare.com/). 2. Select **Email Security** > **Reclassifications**. -3. Choose **Team submissions** to view emails your security team submitted for reclassification. **User submissions** to view emails your users submitted for reclassification. +3. Choose **Team submissions** to view emails your security team submitted for reclassification, or **User submissions** to view emails your users submitted for reclassification. ### Team submissions -Team submissions allows you to view emails your security team submitted for reclassification. All team submissions receive a human review by Cloudflare. +Team submissions are the emails your security team submitted for reclassification. All team submissions receive a human review by Cloudflare. Select among the following filters: @@ -108,7 +108,7 @@ Select among the following filters: 2. **Original disposition**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). 3. **Submitted as**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). 4. **Final disposition**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). -5. **Escalation**: This field describes whether the team submissions has been escalated or not. Select among `Yes`, `No`, or `All`. +5. **Escalation**: Filter by team submissions that have been escalated or not. Select among `Yes`, `No`, or `All`. Once you have selected all the filters, select **Apply filters**. @@ -116,9 +116,11 @@ The dashboard will populate the table with the list of emails your security team ### User submissions -User submissions allows you to view the emails your users submitted for reclassification. User submissions help enhance our detection model, but can be escalated for human review. +User submissions are the emails your users submitted for reclassification. User submissions help enhance our detection model, but can be escalated for human review. -1. **Date Range**: You can select a date range from the last 7, last 30, and last 90 days. +Select among the following filters: + +1. **Date Range**: Select a date range from the last 7, last 30, and last 90 days. 2. **Original disposition**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). 3. **Submitted as**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). From fc1e42e31e3ea948ff2876da10cc67e54737d802 Mon Sep 17 00:00:00 2001 From: Maddy <130055405+Maddy-Cloudflare@users.noreply.github.com> Date: Thu, 6 Feb 2025 10:44:04 +0000 Subject: [PATCH 5/5] Changing list to bulleted list --- .../insights/email-monitoring/search-email.mdx | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx b/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx index 3bb1724e1f90c92..8ab659169e892a5 100644 --- a/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx +++ b/src/content/docs/cloudflare-one/insights/email-monitoring/search-email.mdx @@ -104,11 +104,11 @@ Team submissions are the emails your security team submitted for reclassificatio Select among the following filters: -1. **Date Range**: You can select a date range from the last 7, last 30, and last 90 days. -2. **Original disposition**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). -3. **Submitted as**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). -4. **Final disposition**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). -5. **Escalation**: Filter by team submissions that have been escalated or not. Select among `Yes`, `No`, or `All`. +- **Date Range**: You can select a date range from the last 7, last 30, and last 90 days. +- **Original disposition**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). +- **Submitted as**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). +- **Final disposition**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). +- **Escalation**: Filter by team submissions that have been escalated or not. Select among `Yes`, `No`, or `All`. Once you have selected all the filters, select **Apply filters**. @@ -120,9 +120,9 @@ User submissions are the emails your users submitted for reclassification. User Select among the following filters: -1. **Date Range**: Select a date range from the last 7, last 30, and last 90 days. -2. **Original disposition**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). -3. **Submitted as**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). +- **Date Range**: Select a date range from the last 7, last 30, and last 90 days. +- **Original disposition**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). +- **Submitted as**: Select among the [available values](/cloudflare-one/email-security/reference/dispositions-and-attributes/#available-values). Once you have selected all the filters, select **Apply filters**.