PhishER Questions / Feature Requests

Respondida

Eddie Anderson

18 de agosto de 2020 22:41

Hello,

 

We recently implemented PhishER and have a few items that I'm looking for solutions for. 

 

1. Reporting out of PhishER.  I'd like to pull metrics such as emails analyzed, VT data, # of messages quarantined vs. deleted, etc.  I don't see any information for PhishER in the API.  Is there a way to extract this data to run reports on it?  If not, is this something that's on the roadmap?  This would be very powerful for my InfoSec reviews where I can showcase the value and functionality of one of our tools to our executive team.  

 

2. In O365 Mail Trace, we can detect when an email has been spoofed.  Is it possible to create a YARA rule that will tie into that O365 data, since KB4 is already authenticated to use it, to tag spoofed emails that were reported?

 

3. I'd like to whitelist certain domains from the reporting screen.  Our company signature is being tagged on each one and is skewing metrics significantly based on our own marketing campaigns attached to signatures.  I'm working on removing the signature from applying when heading to the PhishER inbox, but initial tests proved unsuccessful.  Is there a way to address this in PhishER to get more meaningful and accurate reporting metrics?  

 

Thanks

0

• 

  Douglas Freeman 19 de agosto de 2020 11:34

  Hello Eddie, 

  Thank you for contributing to the community board. It seems like you have a lot of questions or items you'd like to implement I'd be glad to open a support ticket on your behalf so that a technician can answer your questions more in-depth. 

  You can always open a ticket yourself by emailing support.knowbe4.com or by giving us a call

  United States: +1 855-815-9494
  Mexico: +52 800-283-3201
  El Salvador: +503 2136-1126
  Phone support is available weekdays from 6 a.m.-9 p.m. (Eastern)

  I think that is going to be the best way to address some of these items. Let me know if you would like me to open a ticket on your behalf I'd be glad to do so!

   

  0

  Ações de comentário Permalink
• 

  Eddie Anderson 19 de agosto de 2020 17:53

  Hey Douglas,

   

  Yes if you could please open a ticket for us that'll be great. I was directed by our CSM to post PhishER feature requests here.  For future reference, is this the appropriate avenue for that? Or is submitting a ticket to KB4 preferable?

   

  Thanks

  0

  Ações de comentário Permalink
• 

  Douglas Freeman 20 de agosto de 2020 10:34

  Hey Eddie, 

  I'll be glad to open that for you. It is appropriate to put those feature requests here but In reading what you're looking for I'm thinking there may be ways to accomplish what you're asking for so I'd like to at least run this one through our support team to see if can assist with some of these items. Maybe not get you the exact thing you're looking for but find ways to still assist you. 
  
  I'll put in that ticket and I'll also file the feature requests on the exact items that you're referencing that we don't have the exact functionality for. 

  We always appreciate your feedback so absolutely please feel free to contribute to the community board at any time!

  0

  Ações de comentário Permalink

Por favor, entrar para comentar.