Track a suspicious email using a Graph Message ID

If your organization has the people, processes, or technology to investigate emails, you can use the Graph Message ID to support that outcome.

  1. Sign in to the MA Portal.
  2. In the menu bar, click Reported Phishing.
  3. Click Reported Emails list, and then search for the reporter, date, or threat level to filter the listed results.
  4. For the suspicious email that you want to track, copy the data from one of these columns:
    • From Address
    • Subject
    • Graph Message ID
  5. Use your organization’s email analysis to review the email data you copied.