Item: KnowBe4 PhishER/PhishER Plus
Rating: 10
Author: Richard Fantozzi, Jr

Use Cases and Deployment Scope

We use it to automate the response and quarantine of phishing emails in conjunction with Office 365. This has greatly reduced the workload and response time of our security team. This has also helped improve the response to phishing emails to users to improve their awareness of what is and what is not a phishing email. One other use is the integration of webhooks to Microsoft Sentinel allow us to investigate incidents from Email

Pros and Cons

Identify clean, spam or bad emails
Speed of identification and response
Automation of reporting to integrated systems
Provdining supporting evidence for bad emails

Initial setup possible with a default setup that utilizes all functionality that could be turned off/on and modified per customers needs
Supporting multiple actions per foiund email instead of multiple rules needed to fire an email and a webhook

Return on Investment

The amount of time responding to phishing emails has been reduced signifanctly from several hours per week to less than a hour.
When an indcident does occur the ability to track from email to person to computer system within sentinel has been a great addition to remediation.
With the phish alert being enabled in desktop and mobile outlook it makes it very easy for employees to report emails early and often. So even though the amount of time to respond has been reduced we have seen a large increase in the number of emails reported.

PhishER Capabilities

PhishRIP and PhisEr Block Lists. We have not utilized PhishFlip at this time.

All threats are blocked and and PhishRIP is automated once a threat is found to remove all existing emails.

Key Insights

Do you think KnowBe4 PhishER/PhishER Plus delivers good value for the price?

Yes

Are you happy with KnowBe4 PhishER/PhishER Plus's feature set?

Yes

Did KnowBe4 PhishER/PhishER Plus live up to sales and marketing promises?

Yes

Did implementation of KnowBe4 PhishER/PhishER Plus go as expected?

Yes

Would you buy KnowBe4 PhishER/PhishER Plus again?

Yes

Likelihood to Recommend

Less than a half hour of setup and we where ready to go with way more automatation that we had before which has proven to be highly effective especially when there are emails that make it through like in BEC scenerios with trusted 3rd parties.

KnowBe4 PhishER Great Time Saver.

Overall Satisfaction with KnowBe4 PhishER