X-ray Feature Overview and Usage Guide

The X-ray feature provides users with an interactive, detailed view of each email message—including sender and recipient information, message location, trust decisions, attachments, and a secure lock ensuring only the user can access the content—allowing comprehensive insight into the message's status, contents, and journey within the mail system.

Description

X-ray provides a comprehensive look inside each message sent or received. A unique X-ray link allows visibility into what's bad or good about a message, what's inside it, and where it travels. It can also provide a lock for the message so that only the user can access its contents -- no one else.

Preview Emails and Interact

X-Ray Items.png

The X-ray contains an interactive view of a message. From that view several pieces of information can be viewed and actions can be taken.

1.Name of the Shield User . This is the recipient of the message.
2.Location of the message in the mail client. This is where Shield sees the message. This is a dynamic field, so will update as the message moves between folders.
3.Name and email address of the sender.
4.Trust Decision of the message. Clicking on the trust decision leads to the sender's trust decision page.
5.Subject of the message, number of attachments, and when the message arrived.
6.Heads-Up Display (HUD) . The Heads-up Display, also known as the HUD (Figure 1), is displayed at the top of each message. It shows more details about why it received its security risk decision. If a user clicks on the HUD, they are brought into the Shield X-ray view of the message, where Insights, Links, Files, Details, and a Timeline can be seen. A Lockbox feature is also available for Shield Pro users who need the contents of their message encrypted.
7.Contents of the message. If the Shield user viewing the X-ray is also the recipient of the message, or if the recipient is a shared mailbox, then the contents of the message will display. For all other Shield users the contents of the message will be hidden on the X-ray screen.

X-ray Features

Insights

The Insights tab offers a clear, easy-to-understand summary of what Shield found in the email. It’s designed to be user-friendly so anyone, not just technical experts, can understand the information.

Insights tab.jpg

The Shield Heads-up Display (HUD) Glossary outlines all insights Shield can identify in an email.

Links

When the X-ray is opened, Shield performs deep link analysis. It will click on a link and follow all the redirects to the end result of that link.The Links tab provides the results of a check the links for malicious activity and even provide a visual preview of the website.

Links tab.jpg

Files

The Files tab shows which files are attached to the email. A small warning is that the files can be malicious to the end user. The files are scanned and checked for malicious content. The type of file is also listed in understandable language, so the end-user understands what they could be opening.

Files tab.jpg

Lockbox

Lockbox is a Shield Pro feature that stores emails outside the local mailbox and off the Exchange server in M365. Emails within the lockbox are encrypted with AES 256 encryption. This makes it a perfect feature for storing emails you wouldn't want bad actors to get their hands on if a mailbox is compromised.

Emails that are locked show as Locked within X-ray.

Emails can be unlocked using the link provided in the placeholder email within a user's inbox and Multi-Factor Authentication.

More information about Lockbox can be found here.

Details

The Details tab provides technical information to help troubleshoot email issues. When your user shares the X-ray link for an email, you can easily identify any problems with the message. This tab also allows you to download a .eml version of the message.

Details tab.jpg

Timeline

The Timeline tab shows a message's travel history, from where it started to its current location. If you're unsure where a message is, this tab helps you determine its current location. This tab is useful for messages that show as Delivered in Spotlight but are held by Microsoft and are not yet arrived to a user's mailbox, as well as for many other delivery issue scenarios.

Timeline tab.jpg