I've finally got everyone in the company reporting suspicious phish via the Phish Alert Button! Yay!
The users are typing in comments and questions which keeps the (security) dialog open. Sometimes they'll say why they are suspicious and ask me for feedback or to explain something to them. Now users don't have to send their comments to me in a separate email!
These comments show up in the Discussion tab of PhishER if the reported email was NOT a KB4 simulated phish. The problem is that I've got users who are reporting KB4 simulated phish and typing in comments for me to respond to! It doesn't matter if the email was a simulated phish. The users' comments and questions are still valid and mustn't be discarded!
I've put great effort into relationship building. Users know that if they reach out to me, I will respond. This PAB behavior is now breaking that trust.
There are various things in KMSAT and PhishER that I'd like to see fixed or enhanced soon but this one is a major issue.
Since it's a comment for a simulated phish, it probably doesn't make sense for the comments to show up in PhishER. Is there a way we could specify a different email address that these comments would get emailed to?
Kirjaudu sisään jättääksesi kommentin.