Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Attack simulation training sending emails to users in the middle of the night

Copper Contributor

Hi all


Just trying to setup Attack simulation training for a company.


Just getting this weird problem where is sends all emails in the middle of the night as if its out by 12 hours,


Have set them up to be region aware and checked the region settings of the users on 365, all set right. when i don't tick the region aware it does the same thing. 


Any help would be great!





2 Replies

Hi @NZnick,

here are some suggestions to address the issue:

  1. Review Simulation Settings: Double-check that the simulation settings are configured accurately.

  2. Optimize Payload Timing: Consider deploying multiple payloads at different times during the workweek.
    Microsoft Attack simulator campaign emails should be sent in staggered way - Microsoft Community Hub

  3. Segment Target Lists: Divide your target list into multiple groups and execute the simulation on different dates.
    Attack simulation training deployment considerations and FAQ | Microsoft Learn

Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.

If the post was useful in other ways, please consider giving it Like.

Kindest regards,

Leon Pavesic

I must admit that we use option (3) and segment our target lists. I looked at using the simulator's ability to break up large target lists in 2022 but we operate under restrictions from our recipient service desks so manual control makes more sense for us. I would not want to trust my 2022 findings and would want to test again if going back to large batches today, but of course this is one thing that is very hard to test unless it is done on your live tenancy.