The fantastic KnowBe4 PhishER SOAR platform

I use KnowBe4 PhishER as a Security Orchestration, Automation and Response (SOAR) to manage, analyse, respond to the very high volume of emails potentially dangerous reported by my company users with the "Phish alert button." Thanks to this platform I was able to automate 90% of the workstream linked to the reported emails by end users, as the platform automatically analyse the message and classify it as a threats, spam or clean. Based on this classification and based also on tags assigned I'm able to identify the dangerous emails and react to prevent threats. Very useful is the ability to create rules and actions, so I can give an immediate response to the user that report the email as suspicious and confirm if is a threats, spam or not dangerous, in this way I improve also the ability of the users to recognise a phishing and spot it. I use this platform every day and few times a day to monitoring email reported to identify spear phishing, massive spam or massive phishing email, this allow me to take action to prevent threats and avoid that others users that receive similar r email click on dangerous link or enter credential. The platform is easy to implement and can be integrated with other service providers like Microsoft for example the possibility to activate the PhishRIP allow the deletion of dangerous email in the user recipient for example before they read it and take an action that can be dangerous if is not able to spot that is a threat.

Considering that the company has more than 30,000 employees, the number of phishing emails received daily is very high. Only thanks to the KnowBe4 PhishER was it possible to manage the workload automatically, efficiently and quickly, drastically reducing the number of users who click on malicious links or inserting credentials into fake pages put the company's data and assets at risk. With KnowBe4 PhishER I automatically improved users' awareness in recognizing malicious emails, it is a valid tool for integrating the awareness achieved with training because it uses real situations and provides confidence to users who, by reporting the emails and receiving feedback, become responsible and understand what are the warning signs contained in the phishing email.

My organisation have implemented the PhishML machine learning that allow to automatically categorise email and react based on type of category and tags, creating rules and actions is easy to respond to the users if the emails is a threats or spam or clean. We use also the PhishFlip very useful to use when send phishing test campaign, in this way users are aware n the last technique used by attackers.