How to read results on the Phishing module?

From Stoïk Protect, you have access to a dashboard to track the results of the phishing simulation campaign, both overall and individually for each employee.

Company results

On Stoïk Protect, go to Phishing and then Results.

• Conversion funnel: The overview funnel at the top shows the total number of emails sent, opened, clicked, and credentials submitted since the start of the phishing campaign. (If the simulation is paused and then reactivated, these figures are not reset.)

• Column "Received": You can see the total number of emails received by each employee.

• Column "Employee risk": A user is categorized as "high risk" when they have submitted their credentials. Conversely, a user is classified as "low risk" if they have never submitted credentials or if they haven't submitted credentials since receiving at least three phishing emails. Users at high risk are automatically moved to the top of the list for greater visibility.

For a consolidated view of the results, you can export them from the bottom left of the collaborators list.

What to do in case of a false positive? False positives can occur when systems like Gmail or Outlook automatically analyze email content, which may be misinterpreted as an email opened. The "Anti-spam" feature is an easy way to avoid these false positives.

Individual results

By clicking on one of your colleagues' email addresses, you can view their behavior in detail, including whether they received, opened, or clicked on emails, or submitted their credentials.