{% extends "base.html" %} {% block title %}Threat Campaigns · Email Security{% endblock %} {% block content %} {% include "_email_nav.html" %}

Threat Campaigns

Quarantined mail (30d) clustered by sender domain + threat type + subject pattern — coordinated attacks surface as one campaign.

‹ Email Security
{{ campaigns|length }}
Active campaigns
{{ total }}
Quarantined (30d)
{{ singletons }}
One-off (unclustered)
{% if campaigns %} {% for c in campaigns %}
{{ c.type }} “{{ c.subjpat }}”
from {{ c.domain }} · first seen {{ c.first| pt('%m-%d %H:%M') }} · last {{ c.last| pt('%m-%d %H:%M') }}
{{ c.recipients }} recipient(s) targeted {{ c.senders }} sender address(es) sev {{ c.severity }}
{{ c.count }}
messages
View ›
{% endfor %} {% else %}

No campaigns detected — quarantined messages so far are isolated one-offs. Coordinated attacks (2+ similar messages) will cluster here.

{% endif %}
{% endblock %}