🎣 The Reported Email

A user reports a suspicious DocuSign email. Is it one phish or a whole campaign? Balance rigor, containment, and the trust of the person who reported it.