Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: v20241211a
Table of Contents

2024-0512-0211

Status
colour

...

Blue
titlenew

...

feature
-

...

By default, the new "Newly Registered Domain" threat category will classify all emails falling below the specified threshold in the Domain Age Analysis section of the dashboard, accessible here: https://app.inkyphishfence.com/settings/analysis .

To configure, set the Maximum age (in days) for a domain to be deemed "newly registered" within the range of 1 to 60 days. Alternatively, set it to 0 to deactivate this feature.

By default, this Threat Category will trigger a Caution Banner. However, selecting the checkbox will elevate all messages categorized as "newly registered," based on the specified maximum age, to Danger status.

...

Status
colourPurple
titlenew Threat Category
- Potential Sender Risk

Recently added, a new manual threat category dubbed "Potential Sender Risk" empowers admins to directly flag potential risks within INKY. Paired with the new DMARC authentication method, this feature grants admins greater command over their email flow.

This category can be useful when shared addresses from SaaS services like Dropbox are used during phishing campaigns and are unable to fully block a sender.

Add this category using the normal “Add new entry” option on the Block List configuration page here: https://app.inkyphishfence.com/settings/block-list

...

Team or Organization filter search

The Team search option within the Filters on the Dashboard has been updated to include an Organization search. This new search option allows you to search for a specific team or organization within the Dashboard. You can search using four different methods:

  1. Team Name: Search for a specific team by name.

  2. Organization Name: Search for a specific organization by name.

  3. Team ID: Search for a specific team by ID. This is the unique identifier for the team which is the same as organization ID.

  4. Domain Name: Search for a specific team by domain name.

...

Organizations are displayed in the search results with a building icon next to the name. This allows you to easily identify and filter by organization.

Status
colourBlue
titlenew feature
- Reinstall Option on Tenant Operations

On the Tenant Operations page Tenant Operations there is a new Reinstall option available. This option allows you to reinstall INKY for a specific tenant. To use this option, click the Reinstall button and confirm the action.

...

Note

This action will reinstall INKY for the selected tenant. All dashboard configuration will NOT BE modified. However, there may be a small window of time where messages are not processed by INKY. Only perform this action if you are sure you want to reinstall INKY for the tenant. If you have any questions reach out to INKY Support support@inky.com.

...

Status
colourBlue
titlenew

...

feature
-

...

Delete Entries from the Allow or Block Lists

Admins can now delete entries from their Allow and Block list. You can delete directly from the active list, as well as the disabled list. Simply select an entry then “More info” to expose the below settings giving the option to delete.

...

Elevate Entries from the Allow or Block Lists at a Team Level to an Organization

Organization Admins can now elevate team level Allow and Block list entries up to the top of their hierarchy, so they apply to all teams.

Make sure you’re on the appropriate organization level, which is denoted in the Team Filter with the skyscraper icon.

...

When accessing https://app.inkyphishfence.com/settings/allow-list and https://app.inkyphishfence.com/settings/block-list , you'll find the familiar Allow and Block List options. However, a new column labeled "Team" has been introduced in the table entries. Entries marked with "(all teams)" next to the team’s name apply to all child teams within the organization, while those without it apply only to the specific team.

To promote a team-level entry to an organization-level entry, simply select the desired entry, click "More info," and choose "Copy to Organization" in the popup. A subsequent modal will appear, confirming the parent organization and showing the number of teams it will impact.

...

Once copied you’ll see the new entry in the table with the (all teams) designation.

...

Status
colourBlue
titlenew Features
- New dashboard filters for phish and spam content categories

In the Widget Filter Editor, you can now search for specific Phish and Spam content reason categories. Navigate to Analysis → Phish or Spam Content in the filter to view the list of matches. The current expanded categories are listed below. INKY will add more categories as needed.

Spam

  • Block List

  • Mostly Blank Message

  • Pattern Match

  • Spam Engine

  • Spam Sender

  • Upstream Google Classification

  • Upstream Microsoft Classification

Phish

  • Bad HTML Attachment

  • Bad PDF Attachment

  • Block List

  • Fake Voicemail

  • Pattern Match

  • Personalized Phish

  • Phishing Sender

The message detail view of a particular message will expand more on what these subcategories are.

...

Status
titleEnhancement
- Add “Jump to Filter” search input on the filter editor

Found at the bottom of the Widget Filter Editor is a new search tool to find a sub filter faster. For example, if I wanted to find the Phishing Content filter from above you can search “phish” and select the appropriate option.

...

Status
titleEnhancement
- Improved outbound message view

  • Added teamId and Recipient To Addresses to metadata tab

  • Added URL copy/Open in new window buttons

  • Enabled the message tag editor

  • New workflow statuses in the timeline with clickable rule names to take user to the Rules tab

Status
titleEnhancement
- Expanded QR Code Detection

QR Code detection has been improved to ensure detection even when the DPI of a QR Code image is too low for traditional methods.

Status
titleEnhancement
- Gradient MSP PSA Integration now supports new products

...

Workflow Expiration Reminder Notifications

INKY’s Outbound Workflow includes notifications for messages held for review. Approval expirations can be set to 1, 2, 3, 5, 7, 14, 30, or 60 days, depending on the rule. However, longer approval periods carry the risk that the original approver might not act in time. To address this, we’ve introduced Expiration Reminders.

You can configure Expiration Reminders through the cog settings icon under the “Edit Rule” options. Simply select “Add Reminder” to set up the desired notifications. You can schedule up to two reminders with different intervals. For example, in the screenshot below, the 2 days and 4 hours option ensure the approver is notified 2 days and 4 hours before the original message’s expiration.

...

Status
titleENHANCEMENT
- Audit Log Updates

The Audit Logs has been updated to provide all accessible logs for the selected team or organization. INKY currently retains logs for the lifetime of the customer account (since June 2021). You can filter by the pre-selected timeframes or use the custom date range to view logs.

Find the audit logs at the bottom of this page: Admin Management - INKY

Status
titleENHANCEMENT
- Allow and Block List Comment Fields

The Allow and Block Lists have been updated to include a Comment field. This field allows you to add a comment to each entry in the list. Comments can be used to provide additional context or information about the entry. Comments cannot be changed once added, but you can delete and re-add the entry with a new comment if needed.

...