I'm doing some testing with the email expansion stage and try to detect any attachments contained in an .eml file.
I've tried it with and without a conditional statement (HCI_filename ends_with .eml) but it fails to pick up the word attachment embedded in the eml file. It does not show up in the results when testing a stage nor does it show in the discovered fields. I checked and the document I'm testing contains a word attachment. Am I missing something here?