Difference between Email and Email cluster

%3CLINGO-SUB%20id%3D%22lingo-sub-2219622%22%20slang%3D%22en-US%22%3EDifference%20between%20Email%20and%20Email%20cluster%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2219622%22%20slang%3D%22en-US%22%3E%3CP%3EWhen%20a%20phishing%20mail%20is%20zapped%20a%20new%20investigation%20with%20multiple%20alerts%20is%20created.%20One%20of%20them%20is%20an%20email%20and%20the%20others%20are%20email%20cluster%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22image.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F265155iF8838B411C99A46E%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22image.png%22%20alt%3D%22image.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20is%20the%20difference%20between%20Email%20cluster%20and%20Email%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnd%20why%20do%20I%20need%20to%20approve%20all%20of%20the%20actions%2C%20when%20they%20are%20concerning%20a%20single%20email%20-%20or%20do%20I%20need%20to%20approve%20all%20of%20them%20in%20order%20to%20delete%20the%20email%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2219622%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EEmail%20security%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Contributor

When a phishing mail is zapped a new investigation with multiple alerts is created. One of them is an email and the others are email cluster:

 

image.png

 

What is the difference between Email cluster and Email?

 

And why do I need to approve all of the actions, when they are concerning a single email - or do I need to approve all of them in order to delete the email?

0 Replies