KnowBe4 Phish Alert Integration

Owned by Andy Nguyen (Unlicensed)
Last updated: Nov 30, 2022 by Matthew Sywulak
3 min read

Summary

KnowBe4 is a phishing awareness training platform that educates users to thwart real-world phishing attempts through simulated messages. With this integration, users can utilize INKY’s “Report This Email” functionality in place of KnowBe4’s “Phish Alert Button”. This allows administrators to streamline one reporting option to reduce redundancy and eliminate confusion. When users report a KnowBe4 phishing simulation through INKY, the report will also be sent to KnowBe4 to acknowledge the user correctly identified the message as phishing. To set up this functionality, please follow the steps below.

Settings

  1. Log in to your KnowBe4 Account Dashboard

  2. In the top right of your dashboard, select your email address, then select Account Settings

3. Under Account Integrations on the left side, select Phish Alert

4. Select the “Enable Phish Alert” checkbox. Copy the license key and select “Save Phish Alert Settings” at the bottom of the section

5. Navigate to your INKY Admin Dashboard

6. Select the Settings then Phishing Awareness Training

7. Paste your license key and select “Save”

8. Your KnowBe4 + INKY integration is now complete! When an end-user reports a phishing simulation through INKY this information will be automatically relayed to KnowBe4. Users will see the following confirmation page after they have submitted the report.

 

KnowBe4 PhishER

PhishER is a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate your threat response and manage the high volume of potentially malicious email messages reported by your users.  Coupling INKY’s “Report This Email” with PhishER allows your users to report from any device, on any client, and receive the same result you’d expect within your PhishER platform. To set up this functionality, please follow the steps below.

  1. Log in to your KnowBe4 PhishER Dashboard

  2. On the bottom left corner select the Settings cog

  3. Select the “Reporting Emails” tab

  4. Copy PhishER email address provided or generate a new email and copy it

  5. Log in to your INKY Dashboard then navigate to Settings then User Reporting

  6. Paste in the email address you copied above into the Safe, Spam, and Phish sections

  7. Ensure that the following options are also checked (they are required for the integration to work).

    2. Attach original raw message as a .eml (message/rfc822) file

    3. Set the From: header in the notification email to match the contact email address specified on the report page (default is an INKY address)

  8. Select “Save Changes.”

  9. Your KnowBe4 PhishER & INKY integration is now complete! When an end-user reports any message through INKY this information will be automatically relayed to the KnowBe4 PhishER dashboard.