Guide: Monitor and Review Phishing Campaigns

Monitoring Phishing Campaigns

Managers can easily monitor and review the company's overall progress and results for all completed and active phishing campaigns, or for a specific campaign, from their Admin Dashboard. Here's how:

Accessing the Dashboard

• Login and access your  'Admin dashboard'
• Navigate to the 'My Company' Tab.

Review Key Metrics

• Phished Rate: Shows the percentage of all phishing emails where learners clicked links or provided personal information.
• Report Rate: Shows the percentage of phishing emails that learners reported as phishing.
• Phishing Campaigns: Review details such as start date, status, emails sent, phished rate, and report rate across all phishing campaigns.

Reviewing Individual Phishing Campaigns

• Click on the name of the specific phishing campaign you wish to review.
• Click 'View Campaign'.
• You’ll be taken to the campaign’s overview page.

Campaign Overview

The campaign overview provides key metrics for a specific phishing campaign, including:

• Sent: The number of learners who received the simulated phishing email.
• Opened: The number of learners who opened the simulated phishing email. This is tracked using a small tracking image in each email. When the image loads, we can track the open in our system. 

• Clicked: The number of learners who clicked a phishing link or attachment.
• Compromised: The number of learners who clicked on a link and entered data into a landing page.
• Trained: The number of learners who completed the just-in-time training.
• Reported: If you've set up the Phish Reporter Service, you can also view the number of learners who reported malicious emails sent as part of the simulated phishing test.

The goal is to reduce the click and phished rates over time, ideally educating learners to recognise and avoid phishing emails.

Expanding Statuses

For more detailed information, you can click the 'Expand Statuses' button. This provides additional results, including the date and time each action was performed:

• Sent: Date and time the phishing email was sent.
• Opened: Date and time the phishing email was opened.
• Clicked: Date and time a link or attachment was clicked.
• Compromised: Date and time the data was entered on a landing page.
• Trained: Date and time the just-in-time training was completed.
• Reported: Date and time the phishing email was reported.

Generating Reports

To download a report from the campaign overview page follow these steps:

• Click the 'Reports' button in the top-right corner of the screen.
• Choose your preferred format: CSV for detailed data or PDF for an executive summary.