In an incident snapshot the attachment is showing as part of body for HTTP and HTTPS upload