Change Storing of Previews

Preview retentionThe retention time of the previews (if it’s stored) is defined via Change Metadata Retention.

Change email previews

The default of email previews is:

Enabled for malicious (red and orange) verdicts
Enabled for all reported emails
Disabled for benign (green) verdicts

To enable previews for all emails, add the following line to local.properties:

local.properties

DEFAULT_email_screenshot_value=true

To disable preview for a verdict, add the *_email_screenshot=true variable to local.properties. For example, to disable previews for all phishing emails:

local.properties

PHISHING_high_confidence_decision_email_screenshot=false
PHISHING_medium_confidence_decision_email_screenshot=false
PHISHING_low_confidence_decision_email_screenshot=false

Change attachment previews

By default, attachment previews are only enabled if:

A Sandbox analysis was made
And the email is classified as malicious

To enable previews for all attachments that were scanned by the Sandbox, set all of the below parameters to true in local.properties. To disable previews for all attachments, set all of the below parameters to false in local.properties.

Property	Default value
`DEFAULT_keep_dana_assets_value` (default for all verdicts)	`false`
`SIMULATION_decision_keep_dana_assets`	`true`
`BEC_decision_keep_dana_assets`	`true`
`EXTORTION_decision_keep_dana_assets`	`true`
`BLACKLIST_decision_keep_dana_assets`	`true`
`FILTER_high_confidence_decision_keep_dana_assets`	`true`
`FILTER_medium_confidence_decision_keep_dana_assets`	`true`
`FILTER_low_confidence_decision_keep_dana_assets`	`true`
`IMPERSONATION_high_confidence_decision_keep_dana_assets`	`true`
`IMPERSONATION_medium_confidence_decision_keep_dana_assets`	`false`
`MALWARE_dynamic_decision_keep_dana_assets`	`true`
`MALWARE_static_decision_keep_dana_assets`	`true`
`PHISHING_high_confidence_decision_keep_dana_assets`	`true`
`PHISHING_medium_confidence_decision_keep_dana_assets`	`true`
`PHISHING_low_confidence_decision_keep_dana_assets`	`false`
`SPAM_short_circuit_decision_keep_dana_assets`	`true`
`SPAM_high_confidence_decision_keep_dana_assets`	`true`
`SPAM_medium_confidence_decision_keep_dana_assets`	`true`
`SPAM_low_confidence_decision_keep_dana_assets`	`true`
`VIP_FRAUD_high_confidence_decision_keep_dana_assets`	`true`
`VIP_FRAUD_medium_confidence_decision_keep_dana_assets`	`false`
`INTERNAL_EXTORTION_decision_keep_dana_assets`	`true`
`INTERNAL_PHISHING_high_confidence_decision_keep_dana_assets`	`true`
`INTERNAL_PHISHING_medium_confidence_decision_keep_dana_assets`	`true`
`INTERNAL_PHISHING_low_confidence_decision_keep_dana_assets`	`false`

​Change email previews

​Change attachment previews

Change email previews

Change attachment previews