Share via

Attack Simulation Training - User Coverage Reports

Anonymous
2023-03-16T14:18:54+00:00

Hello,

We have started to deploy simulated phishing campaigns using Microsoft's Attack Simulation Training. So far we have only deployed one campaign with a limited number of users, however I'm wondering what the best way is to monitor user coverage.

Our aim would be to then choose a select number of user user who have not previously been targetted for the next campaign. We are hoping to avoid including whole departments at a time, to avoid some users noticing that it is a simulated phish and advising colleagues in their team, so we ideally wanted to choose a small number from each department for each campaign to spread out the coverage.

I was hoping that when you are in the 'Target users' section of a campaign creation, that you could filter a list of users which not been targetted previously, then select whichever ones you want, however there is only an option to choose all users who have not been targetted in the last three months.

The 'User Coverage' reporting section displays users who have been included, but not ones who haven't, so I can't export a list to edit and import back into the 'Target users' section.

Are there any features that I am missing, or does anyone have any advice please?

Much appreciated, thank you.

Shaun

Microsoft 365 and Office | Subscription, account, billing | For education | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

3 answers

Sort by: Most helpful
  1. Anonymous
    2023-03-24T14:52:56+00:00

    Hello Shaun_362,

    Good day!

    Thank you for posting to Microsoft Community. We are happy to help you.

    After thorough research and testing from my end, i find out that you have choose to run specific stimulation for the user Attack Simulation Training.

    And for the target user in your stimulation process you have chosen "include only specific users and group". Am i right? if yes there is no option to target users which not been targeted previously. You need to create new stimulation for those users.

    Before you start you should prepare csv file for all user you are going to exclude.

    The only workaround i find is always choose in the attack stimulation "include all users in my organization" and import the users file you want to exclude.

    So next time if you want filter a list of users which not been targeted previously, then select whichever ones you want, to make a stimulation attack, you go to the report of the affected stimulation attack as the picture below:

     And you will find the list of lists of users which not been targeted previously.

     however, the way you are doing cannot give you, list of lists of users which not been targeted previously.

    We apologize if we are not able to meet your requirements; however, thank you for bringing this to our attention, we will surely raise you concerns to our Product Team and hopefully this can be included in the future updates.

     please feel free to let me know if there are any questions or if I've got you wrong. I will keep assisting you based on the information you provide. We sincerely appreciate your patience and cooperation


    Appreciate your patience and understanding and thank you for your time and cooperation.

    Sincerely,

    Eben Ezer Tres | Microsoft Community Moderator

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2023-03-23T10:29:33+00:00

    Thank you Eben,

    I'll look forward to hearing back from you.

    Shaun

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2023-03-16T23:39:51+00:00

    Hello Shaun_362,

    Good day!

    Thank you for posting to Microsoft Community. We are happy to help you.

    We are looking into your situation, we will update the thread shortly.

    Appreciate your patience and understanding and thank you for your time and cooperation.

    Sincerely,

    Eben Ezer Tres | Microsoft Community Moderator

    Was this answer helpful?

    0 comments No comments