Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: v20241230a

Starting from April 26th, 2023, you will notice that the navigation within the INKY App Dashboard has been updated. We have revamped the layout and organization of the menu, as well as added some new features to make it more intuitive and easier to use.

Change and Additions Summary

  • Merged all tabs related to message details under the new Analysis tab.

  • Renamed Settings to Admin Center

  • Added a new Summary submenu within the Admin Center

  • Added a new editable Team label found within the Summary submenu in the Admin Center

  • Renamed “Account Management” tab to Partner Center for partner enabled teams

  • Added a new Summary submenu within the Partner Center

  • Renamed “Secure Messaging” to User Center

Old App Dashboard Navigation

├── Overview

├── Observations

├── Visualizations

│ ├── Threat Level

│ ├── User Reports

│ ├── Link Clicks

│ └── Custom Dashboards

├── Secure Messaging

└── Settings

New App Dashboard Navigation/

├── Overview

├── Analysis/

│ ├── Observations

│ ├── Threat Level

│ ├── User Reports

│ ├── Link Clicks

│ └── Custom Dashbaord

├── Admin Center

├── Partner Center (if enabled as INKY Partner)

└── User Center/

├── Encryption

└── Workflow

...

Admin Center Summary

...

The summary page within the renamed Admin Center is the high-level information regarding the specific team that’s selected. This page will continue to get updated with important high-level information of the specific INKY team. Included at launch are the following:

  • Team Label: an editable label for an INKY team that will begin to be featured more prominently throughout the dashboard, in addition to the TeamID. The team label will be searchable in the current teamID dropdown.

  • ID: the current INKY teamid that’s used throughout the dashboard, this ID cannot be changed.

  • Status: whether or not the team is actively processing mail through INKY.

  • Platform: displays which platform the team is currently utilizing.

  • Licensed Mailboxes: The direct count of licensed mailboxes from the Microsoft Graph API or Google Directory API. Inside the component there is a download icon that allows you to download the current list of Licensed Mailboxes.

  • Unique Recipients: also known as the “Unique Primary Recipient” count used throughout the dashboard.

  • Messages Processed: total number of messages processed.

  • Product Features: the currently enabled product feature list.

Partner Center Summary

...

The partner center summary contains the aggregate count of information across all INKY teams associated with the currently selected partner. This information helps the partner know summary level information across all teams at a glance. The Team List will show high level counts from the Admin Center summary page and the cog icon provides a quick link to the selected team.

...

titlePrevious Updates

...

Table of Contents

2024-12-31

Status
colourBlue
titlenew feature
- Burst Detection

Burst Detection will gradually roll out. If you are under a Burst Attack—often referred to as a Spam Bomb, Subscription Attack, Email Bomb, Email Flood Attack, or Email Storm—please reach out to support@inky.com to have this feature enabled specifically for your team or organization.

INKY introduces Burst Detection, a powerful new feature to help administrators detect and respond to sudden surges in email volume targeting specific recipients over a short period. These bursts can be part of a strategy to overwhelm or distract users, often paired with unsolicited tech support calls or other suspicious offers to help “resolve” the issue.

Configuration can be found on: https://app.inkyphishfence.com/settings/analysis

Learn more here: Burst Detection

Info

You can configure Burst Detection at either the team level or the organization level to apply consistent detection parameters across all teams. Any team-level setting will override the organization-level values.

With the new Burst Detection feature, administrators can configure:

  1. Burst Interval (seconds)
    Define a time window — for example, 300 seconds — within which to measure a surge in email volume.

  2. Message Threshold
    Set the minimum number of messages (e.g., 20) needed to trigger detection of a burst in that time interval.

  3. Burst Mode Cache Duration (seconds)
    Keep a recipient in “burst mode” for a set duration after the initial burst detection to ensure continued protection, even if the volume temporarily dips.

  4. Ignore Senders/Recipients for Burst Detection
    Specify email addresses or domains that should never trigger or be flagged as part of a burst (useful for high-volume internal senders or privileged services).

  5. Result Bucket
    Choose the category (e.g., “Caution (Spam)”) that INKY assigns when a message is detected as part of a burst.

  6. Delivery Target
    Override the delivery action (e.g., route to “Junk Folder”) for burst-detected messages.

  7. Exclude Internal or Trusted 3rd Party Messages
    Automatically skip internal or trusted third-party messages from burst calculations.

  8. Exclude Known External Messages
    Similarly, skip known external, trusted contacts from contributing to burst detection.

...

How It Works

When a sudden surge in email volume meets or exceeds the specified “Message Threshold” within the configured “Burst Interval,” the target recipient is immediately considered in “burst mode.” Messages are flagged under the “Suspicious Mail Burst” threat category, and INKY will apply the configured result bucket and delivery target for the duration of the “Burst Mode Cache.”

Use Burst Detection to protect against potential social engineering attacks that rely on message spamming, or to stay alert when a specific user suddenly becomes a high-volume email target.

For more information on setting up or fine-tuning Burst Detection, refer to your INKY documentation or contact your INKY support representative.

Status
titleENHANCEMENT
- New Brand Impersonation Filter

Found within the Dashboard Widget Filter Editor under Analysis → Brand Impersonation is a new capability to filter messages based on the detected brands domain. Selecting a specific brand’s domain or multiple brand domains will retrieve a list of messages that INKY has identified as Brand Impersonation based on the brand selected.

...

Status
titleENHANCEMENT
- Enhanced Email Header Inspection for Improved Security

With this update, hovering over the From and Reply-To email addresses in a message header will display a popup rendering the address in a mono-font and lowercase. This design improvement helps users quickly identify confusable characters and spot potential phishing attack vectors with greater ease.

...

Status
titleENHANCEMENT
- Improved Filter Descriptions

We've added concise, helpful descriptions to some of the less obvious filters in the Filter Editor. For example, the Brand Impersonation Filter now includes guidance on detecting impersonations based on a brand's primary domain. These updates make it easier to understand and configure filters for your security needs.

...