diff --git a/src/content/docs/cloudflare-one/email-security/email-monitoring/search-email.mdx b/src/content/docs/cloudflare-one/email-security/email-monitoring/search-email.mdx
index 70fe2472aacb464..56b15981ea004b3 100644
--- a/src/content/docs/cloudflare-one/email-security/email-monitoring/search-email.mdx
+++ b/src/content/docs/cloudflare-one/email-security/email-monitoring/search-email.mdx
@@ -220,7 +220,8 @@ Email Security displays the following details:
    - Autonomous sys name: This name identifies your autonomous system (AS).
    - Country
 4. **Links identified**: A list of malicious links identified by Email Security.
-5. **Reasons for disposition**: Description of why the email was deemed as malicious, suspicious, or spam.
+5. **Attachments**: If an email has an attachment, the dashboard will display the filename, and the disposition assigned.
+6. **Reasons for disposition**: Description of why the email was deemed as malicious, suspicious, or spam.
 
 ### Action log