Create PhishRIP Query with only 1 criteria option

Chris Wucher

2022. április 26. 21:04

We would like the ability to start a PhishRIP Query using only 1 of the criteria instead of a minimum of 2 (Subject, Sender, Recipients, Attachments, Body).

We have had phishing attacks where there were not 2 criteria in common with the attack, so we couldn't create a query and RIP them. They had parts of the "Body" in common, but the Subject, Sender, Recipients, and Attachments were all different.

We have had to use Microsoft's Explorer tool in the Microsoft 365 Security Center to remove these emails, instead of using PhishER.

7

• 

  Max Garczynski 2022. április 29. 15:31

  Hi Chris,

  Thank you for your ideas surrounding query capabilities for PhishER! I've passed this request along to our Development team for review. We do take customer input into consideration when planning enhancements to our existing product line; therefore your feedback is greatly appreciated! Anyone who also would like to see this enhancement, please +1 this post, so we can get that information to the development team.

  Thanks again!

  0

  Hozzászólás-műveletek Permalink
• 

  Nathan Emch 2023. március 7. 21:45

  I can understand why there would be concerns over casting too broad of a net, but I believe if proper warning were given beforehand you should be able to perform a PhishRip with only one criteria selected.  Maybe if there were a warning pop-up you had to click through before running a PhishRip against one single criteria?  Regardless, I too see the value in being able to PhishRip based on one single piece of info.
  
  Thanks,
  Nate

  0

  Hozzászólás-műveletek Permalink
• 

  Hunter Allora 2023. március 8. 21:29

  Hi Nathan,

  That's a great idea! I went ahead and added your input and +1 to the feature request for this and submitted it to our development team for review. We base a lot of our new releases and features on customer ideas and requests, so we do appreciate your input!

  Thanks!

  0

  Hozzászólás-műveletek Permalink

Hozzászólások írásához jelentkezzen be.