Your company's compliance officer needs to review email traffic to ensure that sensitive data isn't being transmitted outside the organization. In the Google Admin Console, they have found several instances of emails with attachments being sent to external domains. What steps should they take to further investigate and control this potential data leak?