Unmatched Security Operations email events

Email events that do not match any email parser have their "matched" flag unset. You can view these email event records from the Unmatched Emails list, to reveal external detection systems whose emails are not yet parsed.

As you create email parsers, you can attempt to reprocess the email event (from the form or the list) to validate a new email parser.