If the customer’s email server currently has an account setup to report suspicious emails, then...

an integration added to Exchange keeps the ServiceNow platform in sync

the ServiceNow platform ensures that parsing and analysis takes place on their mail server

the customer’s systems are already handling suspicious emails

the customer should set up a rule to forward these mails onto the ServiceNow platform