Attack Simulation - Copy to SOC Mailbox
Hello Community! Currently we are using Knowbe4 to simulate phishing campaigns. We are evaluating the Microsoft E5 Attack simulation. One problem that I cannot figure out with the MSFT version is as follows: I have the SOC mailbox setup to send phishing emails to a shared mailbox for triage (I have it setup to not forward to Microsoft) When I create an attack simulation, and folks report the phish, I still get a copy of it in the phishing mailbox (I send these out monthly to thousands of people so I would prefer not to have a copy) I have looked at the email headers, and there is nothing in them that I can create a custom rule for. Has anyone been able to filter out attack simulation emails, while still receiving normal user reported emails in the SOC mailbox? Any advice appreciated. Em
Attack Simulator Reporting
Hi, I have a query about the reporting period for the phishing attack simulator? I would like the campaign to send out the emails over 2 day's, but wish the reporting period to be for 2 weeks. In the settings the default setting is 2 day's. Does this mean that the reporting will still be ongoing after the 2 days? If the answer is no, is it possible to change this setting on an ongoing simulator campaign? Many thanks,
Attack Simulation showing as "Clicked" even if I reported the email
So to clarify my issue, here is a screenshot from my report: My users are clicking in report phishing and are being marked as "Email Link Clicked". Can someone help me, please? Richa_Sharma ilyapozharsky Randall_Galloway RichardWakeman
