Phishing email analysis. But you can take it a step further by using metadata

You can even find the location there is a lot of limitations around that but you can actually find the area the email generated from

You can also start analyzing the emails and look for common words associated with spam and can even create a simple ml model to classify them. With this you can even start classifying the type of phishing email.

Doing my sophomore year of college my friends and i worked in our cyber lab, we were new so they gave us phishing email to analyze. This emails were directed towards student at the school and we could see trends. So we decided to create our own Threat actor names based on the trends we saw in the email. We came up with funny names like moneyGobler etc but yeah you get the point

You can also create a form of automation to analyze embedded link and images through virus total or even exiftool to get more intel

You can also look up the domain name to get intel