Working a phishing alert in Splunk

Lab 05 of my SOC home lab. I took a single alert with no verdict attached and worked it.