Suspicious Email Analysis

February 2026

Version 2026.02

February 2026

New Feature

• This release incorporates the latest Fortra email security ML and AI detection models into the SEA analysis pipeline.

Enhancements

• New Malicious Sub-Classification "Response-Recon"

  • This classification identifies early-stage attacker tactics focused on reconnaissance, where the attacker's primary objective is gathering information, not immediately compromising systems or stealing credentials.

• Classification Change fields added for Incidents

  • The new fields will track the original classification of an incident if it changes, along with the time of the change and the type of change made (for example, whether it was a false positive or false negative). This data can be accessed via the Incident Data API.

• Web App Incident Download

  • The maximum number of rows for Incident CSV downloads has increased from 10,000 to 30,000.

Fixes

• Update on email header parsing

  • Special characters will now be retained in the Message ID field.

• Various bug fixes and updates.