Patent ID: 9223971
Filing Date: 2015-12-29
Classification: G06F,H04L

Abstract:
1. A method comprising: at an email client configured to execute on a host computer device, receiving one or more email messages in connection with a user account associated with an email address; displaying the received one or more email messages and a user selectable icon to report suspicious email; and receiving user selections of the icon and an associated suspicious email message among the received one or more email messages, and responsive to the selections, automatically performing suspicious email threat processing on the selected suspicious email message, the automatically performing including: collecting information from the host computer device, the user account, and the email message, the information including a user account name, an Internet Protocol (IP) address of the host, a number of file attachments of the email and a name of each file attachment, and hyperlinks and Uniform Resource Locators (URLs) embedded in the email message; determining an initial threat priority for the email message based on the collected information; generating threat indicators based at least on each file attachment of the email message, if any; determining malware, if any, in the email message based on the threat indicators and the collected information; and creating an event ticket for the suspicious email message having fields populated based on the collected information, the initial threat priority, and the determined malware.