Why would we need to pull a Show original file?
Pulling the show original file can help OIT determine if the email is a phishing, spam, or malicious, or legitimate email. This process is typically performed when a user reports a suspicious email to OIT.
Assign ticket to a Help Desk L2, to reach out to user to get the "show original" and add to email to ticket by using the below steps.
IMPORTANT NOTE: After 3 attempts to reach out to user, either by phone, email or Google Chat and we are unsuccessful, or if the user has accidentally deleted the email, then create a task for Josue Silva to pull the show original and once the task has been completed, then assign over to the IT Security Group for review.
1. Open the email. Make sure that the email is the original email and not a forwarded version.
2. Click on the vertical dots next to the Reply or Reply to all button
3. Navigate down the list of items to "Show Original" and click on "Show Original."
4. On the next screen click on the "Download Original" words and it will download a copy of the email with all of the headers.
5. It will then automatically download the original file.
6. When prompted you can send the original file to the person who requested you pull this file for inspection.