Hi Alistair, The email alert is triggered as soon as we reach a conclusion on a given file - either as benign or malware (assuming email alerts are configured for both outcomes on a per serial number basis, under settings of the Wildfire portal). Our Wildfire portal has been updated but that shouldn't have affected the email alert configuration. If you could forward me your serial number, file name/hash and link to the wildfire analysis page, I can get this verified by our threat team. Many Thanks, Nirmal
... View more