Sublime Email
Search the Sublime rules.Message Data Model sections
Section Description Groups Rules Sender Sender display name and email address, with domain decomposed into root domain, subdomain and TLD. 2 2 Recipients To, cc and bcc recipients, each with email and decomposed domain. 4 4 Mailbox Mailbox owner name and email address. 2 2 Subject Raw subject, reply and forward flags, and base subject with prefixes stripped. 1 1 Headers DMARC, SPF and per-hop DKIM results, plus reply_to, return_path, message_id and originating IP. 10 10 Body HTML and plain text, extracted links with URL decomposition, embedded IPs, and current and previous threads. 7 7 Attachments File name, detected type, content type, size, and MD5, SHA1 and SHA256 hashes. 1 1 Type Inbound, outbound or internal direction. 1 1 References