# How to Use Sniff and Detect

#### <span style="color: rgb(53, 152, 219);">**Overview** </span>[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-03/scaled-1680-/U4ks7IDbEjY7Qwvb-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-03/U4ks7IDbEjY7Qwvb-image.png)

<span style="color: rgb(0, 0, 0);">AQUILA – SNIFF &amp; Detect is a custom integration app within the **AQUILA platform** that enables Microsoft 365 environments to deploy **advanced malicious email detection** capabilities.</span>  
<span style="color: rgb(0, 0, 0);">The app is packaged as a **manifest.xml** file and can be added to an organization’s Microsoft 365 tenant via the **Integration Apps** section in the Microsoft 365 Admin Center.</span>

---

#### <span style="color: rgb(53, 152, 219);">**Key Capabilities &amp; Value** </span>[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-03/scaled-1680-/jBlpQPC2DfMETIrY-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-03/jBlpQPC2DfMETIrY-image.png)

- <span style="color: rgb(0, 0, 0);">**Seamless Integration** – Install in Microsoft 365 with just a few clicks, no complex infrastructure required.</span>
- <span style="color: rgb(0, 0, 0);">**Permission-Driven Security** – Requires admin approval to grant permissions, ensuring a secure deployment process.</span>
- <span style="color: rgb(0, 0, 0);">**Centralized Control** – Managed via AQUILA and distributed through the AQUILA Store for consistent updates.</span>
- <span style="color: rgb(0, 0, 0);">**AI-Enhanced Detection** – Uses AQUILA’s AI and Cyber Threat Intelligence to scan and detect malicious emails in real time.</span>
- <span style="color: rgb(0, 0, 0);">**User-Friendly Accessibility** – Appears in the “More apps” section for assigned users, making it easy to launch.</span>
- <span style="color: rgb(0, 0, 0);">**Minimal Footprint** – Only ~6 KiB in size, ensuring fast installation without performance impact.</span>

---

#### <span style="color: rgb(53, 152, 219);">**<span class="TextRun SCXW129338488 BCX0" data-contrast="auto" lang="EN-PH" xml:lang="EN-PH"><span class="NormalTextRun SCXW129338488 BCX0">Simple Step-by-Step Instructions </span></span>**</span>[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-03/scaled-1680-/L3FUfskDB2bTOhfG-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2026-03/L3FUfskDB2bTOhfG-image.png)

1. <span style="color: rgb(53, 152, 219);">**Access the App**</span>
    
    
    - <span class="MuiTypography-root MuiTypography-body1 css-pps2qs" style="color: rgb(0, 0, 0);">Open Outlook and check the apps panel to ensure Sniff &amp; Detect is listed and accessible.</span>
    - <span style="color: rgb(0, 0, 0);">Users can launch it from <span style="color: rgb(53, 152, 219);">**More apps**</span> in Microsoft 365.</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/scaled-1680-/x0FuZ3iJt7A0EjRE-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/x0FuZ3iJt7A0EjRE-image.png)</span>


- <span style="color: rgb(0, 0, 0);">A phishing email impersonating Netflix. An arrow points to the <span style="color: rgb(53, 152, 219);">**SNIFF &amp; Detect**</span> icon, indicating where to scan or flag the email as suspicious.</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/scaled-1680-/fdE09hu7Rl60QyT9-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/fdE09hu7Rl60QyT9-image.png)</span>

- <article class="text-token-text-primary w-full focus:outline-none scroll-mt-[calc(var(--header-height)+min(200px,max(70px,20svh)))]" data-scroll-anchor="true" data-testid="conversation-turn-24" data-turn="assistant" data-turn-id="request-WEB:f057c933-6170-480a-a00a-6172cc6a9351-11" dir="auto" tabindex="-1"><span style="color: rgb(0, 0, 0);">Click the “<span style="color: rgb(53, 152, 219);">**Scan This Email**</span>” button and wait for the scan to complete.</span>
    
    </article>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/scaled-1680-/pRLtXFAqIgrMvZMx-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/pRLtXFAqIgrMvZMx-image.png)</span>

- <span style="color: rgb(0, 0, 0);">SNIFF &amp; Detect has scanned the email, highlighting possible errors such as</span>  
    <span style="color: rgb(0, 0, 0);">1. <span style="color: rgb(224, 62, 45);">**Arrow 1**</span> points to the <span style="color: rgb(53, 152, 219);">**Language issues**</span> section, showing spelling and grammar mistakes found in the phishing email.</span>  
    <span style="color: rgb(0, 0, 0);">2. <span style="color: rgb(224, 62, 45);">**Arrow 2**</span> points to the <span style="color: rgb(53, 152, 219);">**What you should do**</span> section, giving safety advice on how to handle the suspicious email.</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/scaled-1680-/o6vEVWiMGeCI3Gsk-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/o6vEVWiMGeCI3Gsk-image.png)</span>

- <span style="color: rgb(0, 0, 0);"><span style="color: rgb(224, 62, 45);">**Arrow 1**</span> – Highlights the <span style="color: rgb(53, 152, 219);">**AI Insight Results**</span> tab in SNIFF &amp; Detect, which contains the automated analysis results of the scanned email.</span>
- <span style="color: rgb(0, 0, 0);"><span style="color: rgb(224, 62, 45);">**Arrow 2**</span> – Points to the <span style="color: rgb(53, 152, 219);">**Malicious**</span> classification summary. This section briefly explains the reasons the email is flagged, such as suspicious sender details, urgent tone, spelling and grammar errors, and suspicious links.</span>
- <span style="color: rgb(0, 0, 0);"><span style="color: rgb(224, 62, 45);">**Arrow 3**</span> – Directs attention to the actual phishing email content pretending to be from Netflix, warning about a payment failure and urging the user to update their payment information.</span>
- <span style="color: rgb(0, 0, 0);"><span style="color: rgb(224, 62, 45);">**Arrow 4** </span>– Indicates the <span style="color: rgb(53, 152, 219);">**Report as Phishing**</span> button, which the user can click to formally report the suspicious email to security for further action.</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/scaled-1680-/xCI6XwmmK0SHb2Jv-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/xCI6XwmmK0SHb2Jv-image.png)</span>

- <span style="color: rgb(0, 0, 0);">Click the "<span style="color: rgb(53, 152, 219);">**Run a deep scan**</span>" button, which allows for a more detailed examination of the email to detect hidden threats and malicious indicators.</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/scaled-1680-/51ELQvK9m7iXcuUC-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/51ELQvK9m7iXcuUC-image.png)</span>

- <span style="color: rgb(0, 0, 0);"><span style="color: rgb(53, 152, 219);">**SNIFF &amp; Detect**</span> doing a deep scan on a suspected phishing email pretending to be from Netflix. The scan may take a couple of minutes to finish.</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/scaled-1680-/W3myFSHB02eaTvS2-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/W3myFSHB02eaTvS2-image.png)</span>

- <span style="color: rgb(0, 0, 0);">The scan results are now finished and ready to check.</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/scaled-1680-/mALzljyROiLcmqPz-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/mALzljyROiLcmqPz-image.png)</span>

- <span style="color: rgb(0, 0, 0);">This is the result of a deep scan conducted by the Sniff &amp; Detect tool on a suspicious email impersonating Netflix.</span>  
    <span style="color: rgb(0, 0, 0);">1. <span style="color: rgb(224, 62, 45);">**Arrow 1**</span> highlights the domain **<span style="color: rgb(224, 62, 45);">netflix-billing.com</span>,** which is flagged as a spoofed domain used to impersonate Netflix and trick users into entering sensitive information.</span>  
    <span style="color: rgb(0, 0, 0);">2. **<span style="color: rgb(224, 62, 45);">Arrow 2</span>** lists phishing-related email addresses such as <span style="color: rgb(224, 62, 45);">**richmond@cytcehint.com**</span> and <span style="color: rgb(224, 62, 45);">[**support@netflix-billing.com**](mailto:support@netflix-billing)</span>, which are likely used to send or support the fraudulent email.</span>  
    <span style="color: rgb(0, 0, 0);">3. <span style="color: rgb(224, 62, 45);">**Arrow 3** </span>shows the IP address <span style="color: rgb(224, 62, 45);">**192.168.1.45**</span>, flagged as part of the phishing infrastructure. Although it's a private IP, its presence suggests internal spoofing or malicious setup.</span>

<span style="color: rgb(0, 0, 0);">[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/scaled-1680-/4JxCoYEvR1qYSOzV-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-08/4JxCoYEvR1qYSOzV-image.png)</span>

<span class="EOP SCXW129338488 BCX0" data-ccp-props="{}" style="color: rgb(0, 0, 0);">*If you need further assistance, kindly contact our support at* <span style="color: rgb(53, 152, 219);">***support@cytechint.com***</span> *for prompt assistance and guidance.*</span>