1

Curious how many of you are using KnowBe4 Phish ER. I am looking for some solid feedback, pros cons.

I am looking at maybe doing this, but I am curious what some of you think. Has it helped you and your organization, are there many false positives. I know it uses Virus Total for the scanning, which is a site I use for things, but sometimes links are too new to have any feedback there, so I will look up domains manually, etc… and sometimes use another site to identify links and or files, etc… and then track down the IP, etc… there are some pretty good fake looking emails.
Thanks.

10 Spice ups
2

We use it here. One of my co-workers did the initial setup of it but it’s been working pretty well for us.

The way we have it setup is if a suspicious email comes in, we train the users to hit the “Phish Alert Report” button within Outlook. This sends the email to PhishER. I usually go in once a week to check and properly mark the emails from there. As of right now, 3-4% of the reported emails from this button were deemed “Clean”. The rest have been spam or threat.

So, from our perspective, it’s been working well to help users spot and report bad emails.

3

Hey OP! Great to hear that you’re interested in learning more about PhishER. If you have any questions please feel free to send me a PM!