CybSafe

Detecting PHISH emails is helpful in the following scenarios:

Filtering CybSafe reported simulations to skip a SOC triage process

Connecting PHISH to your report button, but to exclusively send CybSafe simulations only.

- Filtering CybSafe reported simulations to skip a SOC triage process
- Connecting PHISH to your report button, but to exclusively send CybSafe simulations only.

Every email will contain the keyword in html: cs-unique-ref

&lt;div title="cs-unique-ref:1b54b04f-80fc-47d3-b474-702167740795;"&gt;

The HTML shown in BOLD will always be present, so email triage can be automated with an HTML body search for “cs-unique-ref”.

There is no need to make any changes here by 20th June 2024.

<a href="https://docs.microsoft.com/en-us/office365/securitycompliance/enable-the-report-message-add-in#set-up-a-rule-to-get-a-copy-of-email-messages-reported-by-your-users" rel="nofollow noopener noreferrer" target="_blank">https://docs.microsoft.com/en-us/office365/securitycompliance/enable-the-report-message-add-in#set-up-a-rule-to-get-a-copy-of-email-messages-reported-by-your-users</a>

- <a href="https://docs.microsoft.com/en-us/office365/securitycompliance/enable-the-report-message-add-in#set-up-a-rule-to-get-a-copy-of-email-messages-reported-by-your-users" rel="nofollow noopener noreferrer" target="_blank">https://docs.microsoft.com/en-us/office365/securitycompliance/enable-the-report-message-add-in#set-up-a-rule-to-get-a-copy-of-email-messages-reported-by-your-users</a>

Reference guide: Triage PHISH emails

Security Behavior Database (SebDB)

Home

Latest releases

About

Behave hub

Terms

Privacy

Resources

Company

Find answers and get help from Intercom Support and Community Experts

Empty Help Center

Uh oh. That page doesn’t exist.

Disappointed

Neutral

Smiley

Title

Track the progress of all tickets related to your company.

Tickets portal.

{assigneeName} needs more information from you

Triage advice

Useful resources