Reporting API

This feature allows Phriendly Phishing Company Admins to pull data from Phriendly Phishing platform for reporting purposes. Our API is able to send data from the Click Report, Training Results and Email Schedule.

 

Important

  • API Technical Documentation: Accessible from within the Phriendly Phishing platform or via this link - https://api.phriendlyphishing.com/v0.1/docs/
  • API Data: Data accessible through the API is updated once per day and is done overnight. 

 

How to get started with Reporting API?

  1. Go to Settings > Reporting API.
    reporting1a.png
  2. Click Access Credentials reporting2.png

     

    Things to Note

    1. Credentials are not stored; Admins must copy and save it.
      reporting3.png
    2. For lost credentials, click Access Credentials, as the application is already available it sends back the credentials to Phriendly Phishing platform.
    3. If Reporting API is disabled, the application is deleted after 28 days and the Reporting API tab under settings is no longer visible.
  3. Once Admins has the Credentials, this can now be used to get the access token, prior to retrieving any data from the platform.

     Note: Access tokens expires in 12 hours!

 

Data Tables available in the Report

 

Click Report Training Results Email Schedule

This report populates data of current zone by default and can retrieve data from its child zones if filtering with Data: Include Data From Sub Zones. Each data includes information of Learner, Zone, Campaigns, Phishes and Clicks.

  1. Learner’s information: Email, Segment, learner synced attributes' value
  2. Zone information: Zone Name, synced attributes
  3. Campaigns: Campaign (Phishing start-end)
  4. Phishes: Phishing Email (Email Template subject), Attachment (Attachment name), Credential Capture Link (has Credential Capture Link or not), QR Code (code clicked or not)
  5. Clicks: Time Stamp (clicked at), IP Address, User Agent, Action (type of click), Excluded (is Excluded or not)
Field Description Notes
id Click ID The click can be clicked, opened, opened attachment, submitted credential or QR code. 
phish_id Phish ID Phish represents an email that was sent to the learner. 
student_id Learner ID = recipient of the phish

Click table saves the learner id, but does not include the email, segment and synced attribute values of the learner, Please refer to related tables to get those data:

  • refer to students table to get learner's email
  • refer to student_groups and groups table to get segments' name
  • refer to student_attribute_values table to get the student synced attributes' value.
email Learner Email Address  
campaign_id   The block can be Baseline, Campaign, Spear or Training.
campaign_start_date Start date of the phishing block The block can be Baseline, Campaign, Spear or Training.
campaign_end_date End Date of the phishing block The block can be Baseline, Campaign, Spear or Training.
email_template_id Email Template ID  
template_subject   String value
attachment   String value
credential_capture_link Applicable if the email template is a Credential Capture template String value
request_details request details of the click  
created_at date the click is created  
updated_at date the click is updated  
category

Type of Phishing block

  • Baseline
  • Campaign
  • Spear Phishing
  • Training
 
is_excluded

Indicates whether the click is excluded by IP exclusion setting.There are 2 values: 

  • 0 = IP from the click is not excluded
  • 1 = IP from the click is excluded
 
action_type

Type of Action on an email. 

  • 1 means ‘click’ action
  • 2 means ‘open email’ action
  • 3 means ‘open attachment’ action
  • 4 means ‘submit credential capture’ action
 
cell_id Zone ID Click table saves the zone id, but does not include the name of zone. Please refer to cells table to get zone’s name.
email_client Email client  
email_client_version Email client version  
deleted_at Date the click is deleted  
Was this article helpful?
1 out of 1 found this helpful

Comments

0 comments

Please sign in to leave a comment.