PhishER Integration

PhishER is a lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate your threat response and manage the high volume of potentially malicious email messages reported by your users.  Coupling INKY’s “Report This Email” with PhishER allows your users to report from any device, on any client, and receive the same result you’d expect within your PhishER platform. To set up this functionality, please follow the steps below.

 Instructions

1. Log in to your KnowBe4 PhishER Dashboard

2. On the bottom left corner select the Settings cog

3. Select the “Reporting Emails” tab

4. Copy PhishER email address provided or generate a new email and copy it

   Open

   

    

5. Navigate to User Reporting - INKY

6. Paste in the email address you copied above into the Safe, Spam, and Phish sections

7. Ensure that the following options are also checked (they are required for the integration to work).

   1. Attach original raw message as a .eml (message/rfc822) file

   2. Set the From: header in the notification email to match the contact email address specified on the report page (default is an INKY address)

   3. Use a unique subject in the notification email (identifies INKY result, user label, and a unique report id).
      
      

      Open

      

       

8. Select “Save Changes.”

9. Your KnowBe4 PhishER & INKY integration is now complete! When an end-user reports any message through INKY this information will be automatically relayed to the KnowBe4 PhishER dashboard.

 Related articles