Phish Focus: Action messages

Read this article to learn more about the Phish Focus inbox and how to manage messages using the action button.

Actions button status

  • The ACTIONS button is disabled by default.
  • To enable the button, Phriendly Phishing company admin must select one or multiple messages.
  • Once selected, the messages are highlighted, and the number of selected messages will appear next to the ACTIONS button.

Actions button dropdown options

There are 4 dropdown options:

  1. Send Email
  2. Phish Clear
  3. Archive
  4. Delete

Send Email

  • If there are many selected messages, the “Send Email” option will be disabled. The tooltip is displayed to explain why the action cannot be done.

  • After selecting one message and clicking Send Email, the Send Mail popup will be shown: 
  • Phriendly Phishing Admins can customize some information and send email. 

Things to Note

  • The original email will be embedded as an attached .eml file.
  • From field: The account address for sending emails from Phish Focus. FROM sender email address can be customised, further details are available in Phish Focus : Sender Email Address – Phriendly Phishing
  • From Name: The Display Name of the sender when the email is sent, this field is also editable.
  • Template List: Admins can select Default Email Template (Malicious - Response to reporter, No Threat Detected - Response to reporter) or can also use their own Customised Email Template.
  • Tokens: Admins can insert dynamic tokens into the To, CC, Subject, and Email Content fields.

    Available tokens include:

    • {{download-reported-email}} – Adds a downloadable copy of the reported email.
    • {{sender}} – Displays the original sender of the reported email.
    • {{status}} – Displays the current status of the report.
    • {{reported_email}} – Inserts details of the reported email.
      Tip: Tokens are shown in green and are replaced automatically when the email is sent.
  • To: Admins can add multiple email addresses, hit Enter to validate the address.
  • CC:  Admins can add multiple email addresses, hit Enter to validate the address.
  • Include original reporter: ticking this will include the reporter’s email to the “To” address.
  • Subject: Admins can add subject line.
  • Change status to Resolved: ticking this will change the current message’s status to Resolved, and move it to the Resolved tab.

Phish Clear

  • Phish Clear allows a Phriendly Phishing Admin to search for reported emails across all of mailboxes tied to your Microsoft 365 instance. 
  • This enables Admins to remove potential email threats from the inbox across the organisation. 

Archive

  • This action can be done on one or multiple messages at the same time.

  • After selecting Action / Archive, a confirmation dialogue will appear to confirm action.
  • Choosing Cancel button will cancel the action.
  • Choosing Archive button will trigger below steps:
    • The selected message will be removed from Inbox and moved to Archive.    
    • A toast message will appear as a form of notification 
    • Once moved to Archive, Admins can either view data or permanently delete the message

Delete

  • This action can be done on one or multiple messages at the same time.
  • After selecting message/s and clicking Delete, a confirmation popup will appear:
    One message

    Multiple messages
  • Choosing Cancel button will cancel the action.
  • Choosing Delete button will trigger below steps:
    • The selected message will be deleted from Inbox or Archived page.

    • A toast message will appear as a form of notification

 

Was this article helpful?
0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.