šŸ“– 2 mins read

How to Find and delete Phishing emails in Google Workspace?

There are multiple reasons to have the ability to identify and remove emails that have been received by all or any of your domain users.

Here are some unwanted scenarios:

  • Phishing emails
  • An email is sent to the wrong user or group
  • An email contains inappropriate content
  • An email that contains sensitive information
  • An email that has gone past spam filtering

GAT+ allows Admins to find and remove these emails from all accounts at once.

Find emails

To find the emails in real-time we will use Email content searchĀ 

Note: This will find any email as long as it exists in any of your usersā€™ email box.

In GAT+ click on the Email tab then select Email Content Search

GAT Unlock 2.0 | Find and delete Phishing emails 1

In the ā€œquery builderā€ enterĀ the search parameters.

For this example, we search for the Email subject:

  • Query: subject: ā€œImportant email for Sales teamā€
  • Scope: / (top Org.unit)Ā  ā€“ include sub.OUs

GAT Unlock 2.0 | Find and delete Phishing emails 2

Click on Search emailsĀ 

The result will show all emails with the subject: ā€œImportant email for Sales teamā€ ā€“ use quotes to get the exact subject name.

GAT Unlock 2.0 | Find and delete Phishing emails 3

Select the emails (by clicking on the check-mark beside the subject) and click on the ā€œEmail operationsā€ button above the result.

This will show a menu with options:

  • Access ā€˜Unlockā€™ grants
  • Create new access request
  • Access permissions list
  • Download e-mails (EML)
  • Download e-mails (PDF)
  • Remove e-mails (permanent)
  • Remove e-mails (trash only)

GAT Unlock 2.0 | Find and delete Phishing emails 4

Select and click on the Create new access requestĀ button.

GAT Unlock 2.0 | Find and delete Phishing emails 5

A pop-up menu will be displayed, fill in the details

  • Request access until ā€“ pick the date until access to those emails will be granted
  • Message ā€“ Leave an (optional) Message to the Security officer
  • Additional permissions ā€“ checkmark to Enable or Disable the option to Allow removing emailsĀ 

Click on Send request to proceed.

Security officer

When the request is sent the Security officers receive an email for approval.

GAT Unlock 2.0 | Find and delete Phishing emails 6

The Officer then can approve or deny the request.

When it is approved, click on Email content search and select Previous searchesĀ 

GAT Unlock 2.0 | Find and delete Phishing emails 7

From the Previous searches ( Recent email content searches ) select any of the green checkmarks under Actions.

This will open the previous results and the Email operations button will be displayed

GAT Unlock 2.0 | Find and delete Phishing emails 8

From the options select the Access permissions listĀ 

A pop-up menu will be displayed, select the newly approved request ( Investigating suspicious emails to the Sales team )

GAT Unlock 2.0 | Find and delete Phishing emails 9

Result

Click on the checkmark under the Actions.

This will load the result and emails.

On the right side under Actions, the Admin can take individual action on each of the emails

  • Download as PDF
  • Download as EML
  • Show email contentĀ 

GAT Unlock 2.0 | Find and delete Phishing emails 10

On the left side ā€“ select the emails (bulk) and click on the Email operations button

GAT Unlock 2.0 | Find and delete Phishing emails 11

Bulk options will be available.

  • Download e-mails (EML)
  • Download e-mails (PDF)
  • Remove e-mails (permanent)
  • Remove e-mails (trash only)

As a result, Admin can apply live search on the domain find all phishing or accidental emails, request access to them to View their content, Download and Remove emails ( individually or in bulk )

 

If you would like to run a trial of our products pleaseĀ install GAT+Ā from the Google Workspace Marketplace and contact us atĀ support@gatlabs.comĀ with any questions you may have.

To request a demo pleaseĀ click here and fill the form, we will get back to you in less than 12 hours during weekdays.

If you tried GAT in the past and you would like to run a fresh trial again,Ā please enquire through this form.

 

Thanks for sharing and spreading the word!