Forum Discussion

MildHysteria's avatar
MildHysteria
Copper Contributor
Jun 22, 2022
Solved

Attack Simulation Training - Reported Email

As part of Attack simulation training, there is a metric for 'reported email' in the campaign.

 

As per the following link

 

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulation-training-insights?view=o365-worldwide

 
 

 

  • ReportedEmail: How many users reported the simulation message as suspicious.

 

The issue I am having is no where does it appear to be defined by what mechanism the end user should be reporting emails to populate this metric. I have tried both the 'report phishing' and 'report message' integrated apps within the 365 administration centre and neither of these appear to populate it. Anyone got this working?

  • For anyone else whom ends up looking into this issue the answer is the 'report phishing' add-in has eventually populated the ReportedEmail metric. However it appears to have around a 96 hour lag on submission to reflected in the report.

1 Reply

  • MildHysteria's avatar
    MildHysteria
    Copper Contributor
    For anyone else whom ends up looking into this issue the answer is the 'report phishing' add-in has eventually populated the ReportedEmail metric. However it appears to have around a 96 hour lag on submission to reflected in the report.