Phish Focus : Phish Clear

Phish Clear allows a Phriendly Phishing Admin to search for reported emails across all of mailboxes tied to your Microsoft 365 instance. This enables Admins to remove potential email threats from the inbox across the organisation. 

 Requirements

  1. Your Organisation must have an active Azure Subscription
  2. Phriendly Phishing Administrators must have both below permissions to call Phish Focus - Phish Clear feature:
    • Organisation Management (Log into MS Defender > Permissions > Email and Collaboration >Roles >Organisation Management > Edit and add admins that need permission)
    • Compliance Administrator (Log into Azure Portal > Assigned roles)

How to Enable the Phish Clear feature

Phish Clear is a configurable option by the Admins and by default this button is disabled. Refer to below steps on how to enable the feature:

  1. From the Phriendly Phishing platform, click Phish Focus.
    mceclip0.png
  2. Click Settings > Enable Phish Clear functionality.

Steps to start using Phish Clear

  1. Click on Inbox > Received status
  2. Check the box of a reported email, to activate ACTIONS drop-down menu.
  3. Alternatively, click on the 3 dots on the left most part of the selected email.
  4. After clicking Phish Clear, below notification pops-up, if you are not logged in to your 0365 Admin Centre Account.

     If logging in for the first time or you haven't granted permission before, Microsoft will ask you to accept permission.

     

      

     

  5. Once logged in successfully, notification below pops-up, click OK.
  6. Click Phish Clear to proceed with clearing emails. Click Remove.
  7. You will see notification below once Phish Clear has started and emails are now moved to Resolved status.

Steps to view History of the purging

The process takes ~5 minutes to complete. As a Phriendly Phishing Admin you can review results in the Activity Logs of the message. Activity Logs shows:

Admins can also download the activity log in CSV format. 

  1. When clear process has started.
  2. When clear process has ended.
  3. How many emails were removed.
  4. Pass/Fail result of the clear action.

 

Was this article helpful?
0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.