This will include the header information. When you forward an email as an attachment, the email will be sent as is. A screen shot or PDF attachment is not helpful as this does not contain the email header information. When an email is forwarded, the headers of the original email will be changed to the email of the user reporting the phishing email, at which point the email can not be investigated. The email header always precedes the email body. The email header is a code snippet in an email that contains information about the sender, recipient, email’s route to get to the inbox and various authentication details. Sending the email as an attachment allows Information Technology the ability to see full email headers, providing all the information needed to investigate the email. When reporting a phishing or spam email to Technology will ask you to send the email as an attachment.