for Google Workspace / for Microsoft 365

Question:

How can I obtain information to request an investigation for the Email DLP service?

Answer:

Please see below for details.
If you are not sure as to which information is required, please contact Customer Success Guide.

Google Workspace
───────────────────────────────────

A. How to obtain a message source on Gmail
・Sent emails
　1) Open the sent email you want to check in a sender's "Sent" box
　2) Click on "︙(More)" at the upper-right corner and select "Download Message"
　3) Please send the saved file titled "<Subject>.eml" to us

・Incoming emails
　1) Open the incoming email you want to check in a recipient's "Inbox" 
　2) Click on "︙(More)" at the upper-right and select "Download Message"
　3) Please send the saved file titled "<Subject>.eml" to us

B. Google Workspace Audit log
Please refer to the following article in Google Workspace Admin Help.
Based on the steps, search the delivery status of the email you want to check and send a screenshot of your search result details to us.

"Email Log Search"
https://support.google.com/a/topic/2618873?hl=en&ref_topic=2683886

Microsoft 365
───────────────────────────────────

C. How to obtain a recipient header on Microsoft 365
　1) Open the email you want to check in a recipient's "Inbox"
　2) Click on "レ(Pull down)" at the upper-right corner and select "View message details"
　3) Copy all strings on the page and paste it to a text editor
       Please send the saved file to us

D. How to check a message trace on Microsoft 365
Please refer to the following article in Microsoft support.
Search the delivery status of the email you want to check and send us a screenshot of your search result details.

"Run a message trace and view the results in the Exchange admin center"
https://technet.microsoft.com/en-us/library/jj200712(v=exchg.150).aspx

E. How to obtain an eml file on OWA
　1) Access OWA on your PC browser
　2) Click on "Sent Items"
　3) Go to "Filter">"Show as" at the upper corner of the email list and confirm "Messages" is checked
　　（Please check "Message" if "Conversations" is checked)
　4) Click on "Sent Items" and select the email you want to check in the email list.
　5) Click on "NEW" to create a new email.
　6) Drag the email you selected in Step4) and drop it to the new email you just created in Step 5)
      (The selected sent email will be an attachment)
　7) Send the email to yourself
　　(You can also send the email to us directly. if you do so, the following steps are not required)
　8) Open the email you just sent in your "Inbox" and download the eml file attached
　9) Send the downloaded file to us 

Google Workspace & Microsoft 365
───────────────────────────────────

 F. How to obtain email information on the HENNGE Archive service
Please refer to the following article to obtain your message and send it to us.

"Is it possible to download the searched archive mails?"
https://support.hdeone.com/hc/en-us/articles/115002949188

G. How to obtain data by a reproducing test (Investigation on the Email DLP service)
* You can obtain the following data both on Admin Console and User Console.
You need to set a rule on the HENNGE Email DLP service in advance to obtain the reproducible data.
If you are not sure about the steps, please contact Customer Success Guide.

OLD Infrastructure

　1) Send an email matching your temporary suspension or approval rule
　2) Click on "Suspension Messages" of the "Temporary Suspension" section or "Pending Approval Messages" of the "Approval" section
       and select your email
　3) Open the email and capture the whole screen with mouse-overing the "To" section
　4) Click on "Download This Message" at the left corner to obtain an eml file
　5) Please reject the email so that the recipient will not receive that email
　6) Please send the screen shot captured in Step3) and the eml file obtained in Step4) to us

NEW Infrastructure

　1) Send an email matching your temporary suspension 
　2) Select "Me" or "Team" under the "Suspension" section and open the email you want to check
　3) Capture the whole screen including subject and size
　4) Click on "Download" at the upper-right corner to obtain an eml file
　5) Discard the email so that the recipient will not receive that email
　6) Please send the screenshot captured in Step3) and eml file obtained in Step4) to us