> ## Documentation Index > Fetch the complete documentation index at: https://docs.xorlab.com/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > Pages under /latest/ document the current release. Paths that begin with a version number, for example /10.0/, are frozen snapshots of superseded releases kept for reference only — never present their instructions as current. If the reader's version is unknown, answer from /latest/ and say which version the answer describes. > xorlab is deployed on-premises, hybrid, or as a cloud service, and integrates with either Microsoft 365 or on-premises mail infrastructure. Configuration steps often differ between these. State which deployment and integration mode an instruction applies to instead of presenting one as universal. > Distinguish inline mode from monitoring mode when describing anything that acts on email. Monitoring mode observes a copy and cannot block or quarantine; inline mode routes mail through xorlab and can. > Write the product name as lowercase 'xorlab'. Use the documented component names: xorlab Control Center (XCC), xorlab MTA, xorlab Sandbox (DANA), xorlab Natural Language Understanding (NLU). After the first mention, use the short forms XCC, MTA, Sandbox, and NLU. Do not use DANA as a standalone name for the Sandbox, but keep it where it is a literal string in configuration keys, container names, and hostnames. > Do not invent configuration keys, rule parameters, list names, log properties, or API fields. If a value is not present in this documentation, say that it is not documented rather than guessing. # Reporting Suspicious Emails In order to submit a suspicious email for threat analysis, use a reporting button in your email client, for example, a [built-in web Outlook button](#reporting-using-a-built-in-web-outlook-button). If you don’t have such a button, you can always [forward an email as an attachment](#how-to-forward-an-email-as-an-attachment) to `suspicious@`, e.g., `suspicious@example.com`. This email address is configurable (as described in *[xorlab Security Platform Email Addresses](/9.0/activeguard-sender-addresses#reporting-address)*) and depends on your domain name. Depending on the outcome of the analysis and the type of email reported, you will receive a report with more information about the reported email. ## Reporting using a built-in web Outlook button If you [integrated the XSP reporting service with M365](/9.0/reporting-integration#microsoft-365), and you open or preview a message in the web version of Outlook, you will see at least one button allowing you to report this message: Outlook buttons for reporting a message ### Default Outlook button If you are using M365, you can click the default Report Message button. You will then see a context menu. Select **Junk** or **Phishing**—it doesn’t matter which option you choose: ms-button-menu ### Third-party button In some deployments, you will also see a special third-party button to report a message: Third-party button When you click it, a side pane will pop up, allowing you to report a message and also to add information on whether you clicked a link or opened an attachment in a suspicious email. Third-party reporting button menu ## How to forward an email as an attachment ### Outlook for Microsoft 365 (in the browser) 1. Select **New Message**. 2. In the Inbox pane, drag the email you want to send as an attachment to the new message. Forwarding an email in M365 3. Enter the reporting email address—e.g., `suspicious@example.com`—to the **To** text field. The subject and body text fields can be left empty. 4. Click **Send**. ### Outlook for Windows 2013-2019 1. Open the email that you want to send as an attachment. 2. Click **More** and select **Forward as Attachment**. Forwarding an email in Outlook 3. Enter the reporting email address—e.g., `suspicious@example.com`—to the **To** text field. The subject and body text fields can be left empty. 4. Click **Send**. ### Outlook for Windows 2010 1. Right click the email you want to send as an attachment. 2. Select **Forward as Attachment**. 3. Enter the reporting email address—e.g., `suspicious@example.com`—to the **To** text field. The subject and body text fields can be left empty. 4. Click **Send**. ### Apple Mail 1. Open the email that you want to send as an attachment. 2. Click **Message** and select **Forward as Attachment**. Forwarding an email in Apple Mail 3. Enter the reporting email address—e.g., `suspicious@example.com`—to the **To** text field. The subject and body text fields can be left empty. 4. Click **Send**.