Overview

The KnowBe4 Network Capture tool helps diagnose issues with KnowBe4 integrations on your computer, such as the Phish Alert Button or the KnowBe4 Email Security Add-in in Outlook Classic.

The tool captures network activity from applications and add-ins on your computer, including activity that your web browser's developer tools can't detect.

Your KnowBe4 support representative may have asked you to download this tool to help troubleshoot issues you're experiencing. You can learn more about the tool below, or download the tool to get started: networkcapture.knowbe4.com/KB4NetworkCapture.exe

What the Tool Captures

The tool records only the network traffic between your computer and KnowBe4 and Microsoft Office services. This traffic includes add-in activity on your computer that relates to your issue, such as activity in Outlook Classic. The tool doesn't record any other activity or information from your computer.

Before any data is saved or sent to KnowBe4, the tool automatically removes passwords, tokens, and other credential-like information from the captured file. This process happens every time, without any action on your part.

Verify the Tool Is Safe

The KnowBe4 Network Capture tool is digitally signed by KnowBe4, Inc. To verify the digital signature, right-click KB4NetworkCapture.exe, select Properties, and then click the Digital Signatures tab. The tab should list KnowBe4, Inc. as the signer.

To confirm that the file wasn't changed after KnowBe4 published it, you can use the verification hash at networkcapture.knowbe4.com/KB4NetworkCapture.exe.sha256.txt. This step is optional.

Run the Tool

To run the tool, follow the steps below:

1. Download KB4NetworkCapture.exe from networkcapture.knowbe4.com/KB4NetworkCapture.exe and run it. No installation is required. The tool is a self-contained file that runs only while you use it, and it does not require administrator rights in order to run.
2. If Windows shows a one-time SmartScreen caution screen, click More info, and then click Run anyway. For more information, see the Verify the Tool Is Safe section.
3. Click Start. A consent screen explains what the tool will record. Click I Agree — Start Capture.
4. If the application that you're troubleshooting is already open, close the application and open it again. This step lets the tool capture the application's network activity.
5. Reproduce the issue. For example, click the Phish Alert Button, or complete the steps that your support representative asked you to reproduce.
6. After you reproduce the issue, click Stop.
7. Click Export HAR, and save the HTTP Archive (HAR) file to a location that you can find easily, such as your desktop.
8. Send the HAR file to your KnowBe4 support representative in one of the following ways:
   1. Attach the file to an email reply.
   2. Log in to support.knowbe4.com, and upload the file to your support ticket.

Questions?

If the steps in this article don't match what you see, contact your KnowBe4 support representative. If you're not sure that a file is from KnowBe4, contact your support representative before you open the file.