Allow the use of placeholders for [[reporter_email]] and [[reporter_name]] in the From and From Name section respectively of the email template or email action fields.
This would allow users to dynamically direct actions based upon the reporter.
Example of issue:
- End user clicks on PAB to report suspicious email
- PhishER triage the email and determines it is a threat
- An action is set to forward all threats to Ticketing system to generate a ticket
- Ticketing system is unable to assign the ticket to the correct reporter as the email is received from a statically assigned address in the template or action. Analyst must manually assign ticket to the correct reporter.
Allowing for an existing variable to be placed in the From fields solves this example.
Please sign in to leave a comment.