Forum Discussion
Emails reported as Phishing not creating Alerts or Incidents
Hi all, From what I have read I am expecting the marking of emails as Phishing using the Report message add-in in Outlook should result in an Alert generating in XDR based on the default "Email r...
Edmund_Fearon
Hey, alerts for this are default policy. Go to "Policies & Rules" under Email and Collaboration and choose 'Alert Policy', from here make sure the "Email reported by user as malware or phish" rule is enabled.
I've seen the same behavior in the past week. Our default alert is enabled and correct. It hasn't been modified in 7+ months.
We receive *some* email notifications stating an email was reported. There haven't been any incidents created for reported phishing emails since 2/2.