Views:

Follow the instructions below to find out which URL triggered the detection:

  1. Go to Logs > Log Query  then select Policy Events.

    Module state

  2. Search for the email.
  3. The URL that triggered the detection will be displayed under URL. Module state