Microsoft Security Tech Accelerator
Dec 06 2023, 07:00 AM - 12:00 PM (PST)
Microsoft Tech Community

Attack Simulation - Filter by those without job titles

Copper Contributor



We are trying to run a phishing simulation and were looking through the targeting filter, and noticed those without a job title were labelled as "--", is there a way to filter to only see those with the "--"? We can filter to see everyone but them by selecting "All job titles", but we want to be able to see who doesn't have these titles. Is there a way to do that?



1 Reply
It does not really answer your question, but have you considered splitting the exercise into two halves? The first half is an AD extract followed by what off-line cleaning or filtering needs to be done, and the second half is where you save the final target list as a single-column CSV for upload back into the attack simulator. If you are worried about users conferring or overloading your service desk, the suggested approach gives you finer control over timing and scope.