2017-10-20 12:53:38 - Elliot (@SKSM5966 - Central PA) Correct. It relies on attack notification emails being forwarded, and can only report based on that information.