Proofpoint is a leader at identifying email threats. This project seeks to accurately identify emails from the same attack campaign. The team designed and tested software tools to support this investigation, culminating in a retrieval pipeline that, given a query email, returns similar emails from a database.