CompTIA Cloud Essentials+ (CLO-002) CLO-002 — Question 51

An incident response team requires documentation for an email phishing campaign against a company's email server. Which of the following is the BEST resource to use to start the investigation?