Set up KnowBe4 on O365 to Forward Phishing Emails to Radiant Security

Auto-forward KnowBe4 on O365 phishing emails to Radiant Security.

Overview

Radiant Security analyzes phishing emails reported by end users for malicious indicators. Each email is evaluated against a series of questions or actions that determine if an email is benign or malicious.

In order to analyze these emails, Radiant Security needs access to the original email reported by end users. We do this by forwarding emails from your dedicated in-house phishing mailbox to a mailbox on our side.

This guide will walk you through how to set up KnowBe4 to automatically forward user-reported phishing emails in O365 to Radiant Security for triage and investigation.

Prerequisites

This configuration requires that you are an administrator of the KnowBe4 account.

1. In KnowBe4, navigate to Account Integrations > Phish Alert.
2. Edit the PAB configuration for Send Non-Simulated Emails to: and add alerts@report.radiantsecurity.ai
3. Click Save Phish Alert Settings to save the changes.
4. Download the PAB manifest for Microsoft products (PhishAlertManifest.xm) manifest file.
5. Edit the manifest file, incrementally change the Version number and save the file.
6.  Login into Microsoft 365 admin center.
7. Expand … Show All > Settings > Integrated Apps
8. Click on the existing Phish Alert instance and select Update add-in file.
9. Select the radio button for Upload manifest file (.xml) from device and select the latest manifest file that you downloaded previously.
10. Save the changes.

We value your opinion. Did you find this article helpful? Share your thoughts by clicking here or reach to our Product and Customer Success teams at support@radiantsecurity.ai 

Last updated: 2024-08-23