Returns the full raw detail of a reported message (raw MIME headers, HTML body, attachment metadata) for SOC automation. When an automated threat analysis has been produced it is included under emailAnalysis, curated into the same sections a user sees in the portal's Analysis tab: verdict, senderAndAuth, whyFlagged/aiSummary, links[] (URL-detonation sandbox verdicts, plain-English signals and a per-hop screenshot journey), attachments[] (the deep zero-credential scanner's per-file verdict, flagged reasons, links/QR found inside, IOCs and a rendered-page preview) and behavioural signals; otherwise emailAnalysis is null. Screenshot/preview URLs are short-lived presigned links that expire. Admin read; no subscription required.