Archive suspicious email attachments for investigator review before shift

Your incoming investigative email attachments arrive untracked, causing evidence gaps and delayed case triage. Preserve attachments and metadata so investigators can review cases before next workday.