Capture User Comments from Hybrid PAB when reporting KB4 simulated phish

I've finally got everyone in the company reporting suspicious phish via the Phish Alert Button! Yay!

The users are typing in comments and questions which keeps the (security) dialog open. Sometimes they'll say why they are suspicious and ask me for feedback or to explain something to them. Now users don't have to send their comments to me in a separate email!

These comments show up in the Discussion tab of PhishER if the reported email was NOT a KB4 simulated phish. The problem is that I've got users who are reporting KB4 simulated phish and typing in comments for me to respond to! It doesn't matter if the email was a simulated phish. The users' comments and questions are still valid and mustn't be discarded!

I've put great effort into relationship building. Users know that if they reach out to me, I will respond. This PAB behavior is now breaking that trust.

There are various things in KMSAT and PhishER that I'd like to see fixed or enhanced soon but this one is a major issue.

Since it's a comment for a simulated phish, it probably doesn't make sense for the comments to show up in PhishER. Is there a way we could specify a different email address that these comments would get emailed to?

Thanks

Linden Acomb 5 avril 2022 13:45

Hi Lenny,

At this moment in time, the 'Allow users to leave comments and disposition' functionality only applies to non-simulated emails. We do allow you to create custom prompts for when a user reports a simulated phishing email, you may want to include some verbiage (for now) to confirm that any user comment submitted for the email they've just reported, will not be seen.

I've submitted this as a feature request to our development team for review. We base a lot of our new releases and features on customer ideas and requests, so we do appreciate your input.

Thanks!

Linden

KnowBe4

Capture User Comments from Hybrid PAB when reporting KB4 simulated phish

Commentaires

Ce n’est pas ce que vous cherchez ?