The ability to see all the messages that users flag with the PAB

Tough to move between massages and back to the rooms

Our ability to see the target attacks our users are facing and the PhishRIP ability to remove those emails from everyones inbox

I found the PAB button reports most helpful. I like getting them and seeing just what gets reported to us and by which users.

The rules need to be explained a bit better for making things more automatic. I have learned more here at the convention about the rules and we found that two of my rules were cancelling each other out. A better guide linked to that would be great.

The Phish ER is solving our blind spots into what our users are facing in their daily email inboxes and helping us resolve any questions our users have when they report things to us.

I find the detail I'm able to see and the sandbox environment in which to detonate emails to determine if there is a threat, as well as the automation for known emails to free up some of my time.

I find it does not always return clean emails to inbox's and instead leaves them in the Junk Email folder. This might be something with how our account is configured, but I have not been able to determine what is causing this to happen.

Phish ER is helping to train employees to be aware and report suspicious emails, it frees up my time with its automation capabilities, and the Phish rip functionality can take real threats and turn them into training opportunities.

Knowing the phished emails sent by our users are triaged as they are reported making it easier to determine if one is actually legit.

A better understanding of how to eliminate a mass email that has been delivered to all staff where only one person sends it in as phishing.

The solution has provided an greater indepth understanding by our users of the threats that are consistently being sent to us and their diligence in reporting them.

how well it works and how easy it was to setup

That the blocks are not for more than 30 days

helps blocking a large majority of phishing scams

It makes the KnowBe4 PAB more actionable. Adding PhishER to your PAB deployment force multiply the effectiveness. PhishER takes a giant load off our our small team when it comes to analyzing messages and determining the legitimacy of them.

Creating queries is a little rough. Some of it requires knowing the query language.

It is solving the eyes on all reported emails from end users. Our small team would not be able to keep up without it.

It makes it a lot easier to handle reported phishes in terms of blocking email addresses and pulling bad emails with Phish RIP

I wish it had deeper integration into M365 systems

It's hard to manage all the reported emails every day and action on them in a way that makes sense. This gives us automation capabilities and good one-click responses

Having a small IT team, PhishER has saved a TON of time automatically screening our reported emails. Having the ability to set rules and automations, it allows us to focus on the day-to-day operations.

I really don't have anything I dislike about phishER

Allowing my team to focus on the larger picture rather than phishing. We don't have a dedicated security team.

Staff are more aware of Phishy emails sent out by bad actors.

I would like to see an email come back to me when I sent one to the Phisher Button, that it has come back clean, spam or a threat.

I would like to know how it can help us solve problems

It is easy to use and setup. It works and blocks malicious emails. The tool has had a postive experience for our network.

Would like to see better dashboard and reporting metrics

It is helping to extend our cybersecurity strategy to protect our environment.