Summary
Visualizations were designed as a tool for administrators to proactively monitor and assess INKY’s threat detection capabilities. This section of your INKY dashboard contains pre-built and custom dashboards that can be used to gain insights and generate reports into the overall health of your mail environment. Administrators can use this information to identify trends, false positive or false negative detections, and gauge overall user engagement. Each pre-built dashboard can also be exported to a PDF document for viewing by non-INKY administrators.
Pre-Built Dashboards
The visualizations tab currently offers three pre-built dashboards: Threat Level Overall, User Reports, and Link Clicks. The data shown for each report is controlled by the time period drop-down filter on the top right-hand corner of your dashboard.
To export a report to a PDF, select the pink download icon on the top right-hand corner of your dashboard. The download will then initiate automatically.
Threat Level Overall
Total Messages by Threat Level - Total count of all messages processed by INKY, broken down by the total count of each threat level (Neutral, Caution, Danger).
Threat Breakdown - Comparison of messages classified as Caution and Danger broken down by each threat levels sub-categories.
Threats Over Time - A time graph comparing Caution and Danger messages received over a specific time period.
Administrators may find this metric useful in detecting anaomolies that might identify potential false positive or false negative trends.
Top Threat Categories - Total count of the top five threat categories detected.
Sensitive Categories - Total count of messages that matched a sensitive content policy (COVID19, Financial, Password).
Top VIPs Impersonated - Lists the top five VIPs impersonated by their display name.
Top Domains Brands Impersonated - Lists the top three brands detected by INKY’s brand impersonation detection.
User Reports
Total Messages - Total count of messages processed by INKY compared to the total number of messages reported by users.
Total Messages by Threat Level - Total count of all messages processed by INKY, broken down by the total count of each threat level (Neutral, Caution, Danger).
Top Recipients Reporting Messages - Top five recipients ranked by the number of messages they reported.
Top Senders Being Reported - Top five senders reported to INKY as safe, spam, or phishing.
Domain with most threats - Singular domain with the highest number of threats detected.
Sender (email) with most threats - Singular email address with the highest number of threats detected.
Link Clicks
If your account does not have link rewriting enabled this dashboard will not report any links as “clicked”.
Link Clicks Breakdown - Total count of messages with and without URLs, URLs clicked versus not clicked, and safe versus unsafe URLs.
Top Senders with Unsafe Links Clicked - Top three email addresses where the message contains a URL classified as dangerous and the recipient user clicked on the URL.
Top Domains with Unsafe Links Clicked - Top three email domains where the message contains a URL classified as dangerous and the recipient user clicked on the URL.
Top Recipients Clicking Unsafe Links - Top five users ranked by the number of unsafe URL clicks.
Custom Dashboards
At INKY, we know that “one size doesn’t fit all”. That’s why we have enabled our customers to build their own data visualizations. You can sort by or graph many different attributes giving administrators complete power over their security data. Custom dashboards provide a more granular method for message tracking, as well as a useful tool for reporting and analytics.
Create a Custom Dashboard
To create a blank dashboard, navigate to Visualizations > Custom Dashboards and then select “Add Dashboard”.
Once your dashboard has been created you’ll need to add a widget(s). There are multiple widgets to choose from and each one allows you to visualize the queried data differently. You can add one or several widgets to a single dashboard.
To simply see a list of messages choose the “Message List” widget
Default Dashboards
In this section, you’ll find five default dashboards that INKY has created to help administrators better understand their mail flow. You may view these dashboards but they will not be able to modify them. To modify any of the dashboards listed below, you’ll need to click a field on the desired dashboard and select “clone”. Cloning a dashboard creates another dashboard with the same search parameters as the default one.
Possibly Misconfigured Service - Contains a single message list filtered down to the Possibly Misconfigured Service threat category.
Reports - Contains a single message list filtered down to messages that were reported by users.
Reports with Link Clicks - Contains a single message list filtered down to messages that have been reported by users that also contain links that were clicked.
Spoofed Internal Sender - Contains a single message list filtered down to the Spoofed Internal Sender threat category.
Top 10 - Caution - Spam - Contains overview graphs for spam last month including the top 10 senders of spam.