Email Security Cloud Integrated - Event Timeline - Feb 2025

Service Update

Availability	February 27th, 2025
Product(s)	Email Security Cloud Integrated
Who's affected	Administrators

Overview

Mimecast is pleased to introduce the Event Timeline feature on the Detection Details page. This enhancement offers users a real-time overview of the lifecycle of entities within Mimecast, encompassing everything from processing and scanning to subsequent policy and user actions.

Mimecast receives custody of a message after it passes through Microsoft's email system, where it undergoes multi-layered scanning for threats. The Event Timeline will display key events such as custody acquisition, processing completion, quarantine or delivery status, and subsequent user or Administrator actions (e.g., release/remove), along with timestamps and reasons cited for actions.

What's changing

• The Event Timeline can be found under the Timeline tab on the Detection Details page.
• It is visible for all entities - Email, Chat, and Files. The stages differ across each because the processing each entity undergoes is different.
• User actions are recorded along with the corresponding reasons and the admin's name. For instance, when a message is Removed, it specifies who Removed it and the reason provided.
• Progress events for user actions like Release and Remove are not recorded if a final Success or Failure state is available. For instance, a quarantined email may briefly show Release in Progress before changing to Manually Released, in which case only Manually Released is captured to minimize timeline noise. If the email remains stuck in Release in Progress due to a technical issue, we will continue to report that status until a final outcome is determined.

Here are several use cases that a user might encounter:

• In a case where the Email is Delivered
• In the case where the Email is Blocked
• In the case where the Email is Quarantined
• In the case where the Email is Moved to Junk

Recommended actions

No action is required regarding recommendations.

See Also...

• Detection - Viewing Attack Details